Malicious code in pkl.tmbundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b085480587244717534ecdcf4280b1dc0ed096c05f17455017033b4c0b5f3be7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1105 Malicious code in custom-sign-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59f7b65e1e7c3a5681f3302cca12603566d8b1d18e7b9a4803632415f935f0aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethereum-node-crawler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9059050ba1bb06c1571d7f0b513b58f373f35a6c437a14344acd72a1a01872d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in checkout_sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 153a7813e5b4eb21d53e60e52ce7b5fff2b807f28f0ad3d7d9f4d1e61121ed13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in developer-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7028f9c0bc3315f11a48ce063889decd60554ce5b93de9380c43cb83f4d1971 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1071 Malicious code in checkout_sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 153a7813e5b4eb21d53e60e52ce7b5fff2b807f28f0ad3d7d9f4d1e61121ed13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1186 Malicious code in twenty7tec_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e017d2769480cbf3bba9db2ccbdb6c84d6ab1f2717361c18fb96f2dcf442619c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tssinternaldev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fa044fc4abb88d73a8b870213989f256cc6744e4a261edf384d20621717bdad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dvpawebwidgetsdetailspageclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8659cf6ac1fc2030d58c6d72a8c432968ee8de6c7226e9793d5ce8a1f0735f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in achokidar-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04c37042e53e847162e2f5ead2483593efd0e3319ba7f4bd4f890092dea66887 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cs-count (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6961148d61a9a3b12afb0f91d6d4647b2c986b36b0521d40567c9c5aa5860ead Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csachalk-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 484ccc916593adfc8a6d648bed55aeb2fd3ee9ced5c1ca74ccc2aba7a903cf6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cs-magnifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d412de7658e93719fd412b6f30d39270ed6190482deb65c00aaf002f96fe7e2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1096 Malicious code in cscount-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11a586cf9af033069bb8c5123c27f5256d0465223f1525db391bbddde56a6f88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in climate-tokenization-engine-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6c54fe1dfe0ee0595094f7b5480bc0761286fb1ad1460e48b4eb6be7e274f52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in type-fs-extra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d936b4b50723729f923e7728c1169f52f73b0fe7b8f064f29aa9d66ec0937054 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wallet-adapter-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c88a5f680ce3b7a91cc33acc9f9c659a8eda896547804c4745c1b7e3cb91b6 Any computer that has this package installed or running should be considered...

Malicious code in isctf17 (npm)

The package opens up arbitrary backdoor port that allows bad actors to connect to. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc935bae7f6f14d33043543fd5ea79225029b59cb212cb9e7336f98619afb98c Any computer that has this package installed or running should be...

Malicious code in isctf3 (npm)

The package opens up arbitrary backdoor port that allows bad actors to connect to. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ef062f634bf94ff3d92de69f61ddc08a1d9351db44ff84be85fc5eba8c05b23 Any computer that has this package installed or running should be...

Malicious code in isctf5 (npm)

The package opens up arbitrary backdoor port that allows bad actors to connect to. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ded9b3952043478fcfdc7ddc981925d7e31160b4a096e205cf35950e5787d2a2 Any computer that has this package installed or running should be...