Malicious code in etherdjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d33f9046c1fab70c35f189dec4d15635c281418afb4442a639145fc8e445c97e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49084 Malicious code in etherdjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d33f9046c1fab70c35f189dec4d15635c281418afb4442a639145fc8e445c97e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in artifactregistry-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd347194b3db170de6eee9d04102cfda66c40fb1276cc13c04cbdb81db0b33b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48985 Malicious code in artifactregistry-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd347194b3db170de6eee9d04102cfda66c40fb1276cc13c04cbdb81db0b33b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in syntax-dynamic-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fec79d7a70cef5393761c1bf6598e27804e363c0873d62590fe06b49d3bfc4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49061 Malicious code in uach-retrofill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 141cbec0058112e95aa84fb85bbd30f951bf495d0ce2c8b6d2148367eb7e6ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gitlab-lsp/workflow-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77c05dd20ff8e2d3c07051d2f1146ac86522b9a72a6964e27122c9dd02d4c7a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gitlab-test/npm-v10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a2cc1d206acfbb6ecfb92153bc522f6649d002c96ca2cb99d3dd7367520f64a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @decentraland-gatsby/intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c478ce47e595b70be3bf3ed4905775006b6e270a90bbbea45698e1817c8315ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in typescript-compat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0acc4ba0bcbd7793656800efb10926d4044fa65326e8bee88e9b92d2504bc668 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in durablefunctionsmonitor-vscodeext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0bcd6dd0f47781eb145c4a57e94a505ad8fe070437e096926c7c5a7601087b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49023 Malicious code in mourner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f18af0d378a61144c08db151e716049e3382641abab5eb75718aca6c4fb19d00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49014 Malicious code in jfrog-npm-actions-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a600f48287c23fcb6db85ed0ed084de6ce12d7d3fab99e327ec306c6a84ea7f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49010 Malicious code in ing-web-es (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7cea7c30f8d070d425cd30f9b983aebec3169313c6ae647f53073d7dc60f2c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bernie-plugin-l10n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd6d3c0bbb9843d7995ddad49f2b4142829723406f19e006a25df0ff156e9451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48988 Malicious code in bernie-plugin-datadog-rum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0197846dec97a3a236eb5ede3d773adb5c175e3a2e0a497138424270d1610d9a The package bernie-plugin-datadog-rum was found to contain malicious code. Source: ghsa-malware...

Malicious code in prefer-object-spread (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24f3eb78b1232c6b636794710f52f1699237b0b29192397a63c0b1b307652154 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49027 Malicious code in no-unsupported-browser-features (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e421e834a041473c40faa9f19e564697a54e65c126010d4916e2927c757c4e78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fzreo-trading-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88d8fd4cc0828b828f3a6fe64daf9b8dc84c84729972d2c17de5559ab96c653 The package fzreo-trading-sdk was found to contain malicious code. Source: ghsa-malware...

Malicious code in arno-baidu2-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131a10e926c682b41b450810caef439af7c7137fa95422b58970a57ff2a2316d The package arno-baidu2-test was found to contain malicious code. Source: ghsa-malware 380635db26fa9fbaa70b78c6dba294a362a9342cb346a4f0542792c92b7cb7...