Malicious code in css-blocks-monorepo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd8788a6de395289af00ce5d63b51a4609d89ea09f2bf3eb36af0e27234e0fb1 Any computer that has this package installed or running should be considered...

Malicious code in backpack-foundations (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4bba8fcd3cb3b4c99abd7a1cff3ddb0e0c15a179005fbed75b0441572a2dad1 Any computer that has this package installed or running should be considered...

Malicious code in google.kythe (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfd92576cb52e3439544b9c66be7914a1f7326c8ac3ab1ab692d694ae00d5806 Any computer that has this package installed or running should be considered...

Malicious code in jaeger-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f04434e6edf034f78f31f1b79371ae9218b708a68c422adb97016129e0d42b9 Any computer that has this package installed or running should be considered...

Malicious code in eslint-v9 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d46f607d02591ccf25f4bd27e192a7f99206ed9e37dba6c62189bf0945f600a6 Any computer that has this package installed or running should be considered...

Malicious code in @zohaib2121/dtapp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27f5d74d5d130aff4fd7d231b3d9cd57faedebb2a8cc7f462d33e36d00764d50 Any computer that has this package installed or running should be considered...

Malicious code in transaction-report (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1c40d933bc68a269e1fe8750bef686c53bbc78251b864aec8d83093a175fcac Any computer that has this package installed or running should be considered...

Malicious code in flight_lab_control (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5d324357d4041717da0277420513760dccbba17821ed9538aa033304d5f073 Any computer that has this package installed or running should be considered...

Malicious code in org.cocoapods.csv (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3d922335d96d21629591f3c06d391cc64ca4117561dcb9711fb65451dd841e Any computer that has this package install...

MAL-2025-576 Malicious code in ig-lighthouse-to-influxdb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92e8d076b669d18ea59535f03270a27adbfc6b0717789403453fabeb522b988b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-566 Malicious code in airbnb-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58a64fdd730093f2e15a4208e7c8c3a330b7ba9fd2d264fe0a334a530695a5ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testidneel-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2d741fc56c242ce7ac9590ccfe8a91cb20e28e9e9a3fdc9ac721258723cc082 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in self-bots-dc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d57d5a05bea1dda9fbc71d4016a47c33f2a89150eef13a97d587db0329a7e7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in op-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc75870385e27f624816db6a388a5a188640a523bb7d967dbb848ac33dda21b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in request-external-access (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf57b443887e773384068e114f407f70b10c0278c6839c0d5c34f2ba575a63a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tour-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44bfdd42ccd9f1335cf7f7b07ba399341a0a93af1c683563cf6a63697518f580 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-304 Malicious code in sdk-coin-algo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ea750c35c4bec1006a22374fd7f8e5a426522380aa5d0566f1c97875ad977b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdk-coin-bsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ff426abeac1a362b4c6e28dcb79500a3081d0b1b5c4fa0945805a55b97adf05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in design-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a127fa5f9bae939a2e9a5c9f4dd17b801b5dad70a7299913ac5245397aeb519e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-274 Malicious code in blockapis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dcc6d47857bf84c442515ff65b4504f036ccff55a5061b10b29abfb7d76a03e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...