Malicious code in secureshield1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c523ad578efae0d36959b764d0ea4df3c7c88342580a6b3903a2873af85619e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dvd-ai-pc-rag (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a767db3d0d8194ea0442ea2138060477dfc8356ba986a5e7a707145af45d9427 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2351 Malicious code in @sheingroup/babetonight (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a9f5da4050017cefe506f3f3fe0288f57099a5eb659ecd363835423f33389eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mern-ecom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81fdc4ccb8d87c17695fc5ab8f7f8e41ace4f8047187df568530dc8f34d311d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in company-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 100c9d7a50130bea1bde224e847ea63eeaadc65dfcd332d6cf0132d686af772a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rolldownload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e57796af333715605cb3404f3d8653189e6859e7d409e69670109ab17dad2ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2302 Malicious code in codebarrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c801f0c455ad24f1a8ae960118a1bf1dab534b8279e3429ac736dd113fee639a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in code-snippet-editor-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a18fa3d11188e4b7891ebae39b972feeef16bdfe9a92659b7efc450374065e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2304 Malicious code in core-registry-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84d80a92f4bc9e749a6e972e2ce5a00a5861906ac964b41440b6bc71194dbb65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in language-ring (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca7e9ac770686a75d1d581c790e326d66e60e71b9caa83f387a527c3d5e2df88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dt-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f84c1cc320f830bd5436c3d7b8ccef2d0d6a0e8edcfd05e472854ed042a5b0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2260 Malicious code in image-watermarks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 696779031d179d99d69d2fd89de3ae89e25e8bc093c528000aeb73c0bf7525f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2233 Malicious code in @shein-components-test-ump/text-to-speech-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a51a7cd403f53cbbc65d804830060941af889d9ec0f60acd449b59f89a081e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in better_dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4526960d827ae5486d65de8383708d021ba89326b548041564c96bc0aeb9f835 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2278 Malicious code in rexz-imagine-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a5880974c43ddaa1e24f3eecce7e9eb1e66d31adb347a095436a27316c30097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in linear-open-issue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a73eff632d074d970750852ec6e11f70aff4d2291553664b9f84289a189191e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crd-frontend-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c225ce49c193ec137ef2d44bd0ded4bf9da074b818bc455cbe161574dd87f02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in layouts-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 668d31349d49bb3ffdf31cb641b2829be6ffcae92877d17241a593565a0dddb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in leonardo-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00fffa2191cd0445f846c0be2c67b775ad60931115f668721c2ab552760746b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-unzip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd99263d19f7c6599d64abff02934e9d436d39de9b4b3c4f1d3984ccb85956f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...