MAL-2025-48005 Malicious code in tmp-npmsnha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6b7dcde36d84ee5704ed922a7c1b72873a03638a5f31d9e7a57aa2c7c4d2399 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47981 Malicious code in tailwind-config-setting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3a671a6c3e625ad567f217586db00e2b324ca408c883c44ac1b74ebf292ffef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-mui-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08c155a42aab3f06ab4eaf232b95dd7f49d1f53713c9aedd04da0f5054af7357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47983 Malicious code in tailwindcss-config-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 274dba937d6ffacd0bbf3b592f5e43f2dabc7de66db20c54a51965617ef82807 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47968 Malicious code in @dompubsub/dompubsub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70f03208a21f43efdf0471c0a1908c3a7229b8ebdd3572b58fe5921496b85902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47976 Malicious code in eslint-plugin-consumerweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f0908b28feb167dcbd08913b9ddf69ed6e3dab2f79a88d0b757e0869acb4e55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simplerequestnode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ae31813df935cd21732d0b8e2d6cd4eed60fd43c6066f9c8921b0d4185fee75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rechxaartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fc5d0a5a306249e1d1010a8dd5e2e8e90d41a0bda538921ad3e2cec981ab6bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oxrvxxxxxaslllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbb43c3aa5e1fe9b33fc7a3c3a439ef7edd69817df8984551602b834f7b64584 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oxrvxxxaslllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9121764b98e89489abb502bcc35fb1b4cd7c34e64216932ba31a3b908a1e12a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solarpeng_node_eval11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d505d754723f0cafa2002bd7faec5450dcf9decdfd33e05744ea770ff97ac2fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47941 Malicious code in solarpeng126 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 555f2017520c849b1c7dce6f6f434c29609c169105711e6ab0b598d5f329644a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in file-uploading-advance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a24a99ddaa80c4d726f189f11309cdab74b4343f1e567ec3c5fd01fcd9832b3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mcp-server-fixthis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4109cd9a0c196b277a25ff70ae8b8a81ee61aaac82c1d77bbb4e743496508e03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47915 Malicious code in @dotevn/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b95b9f994dbbf3a9562b73fb2a0445eb341e9e8defdf89f43a90a3398270759d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pcxm/gasket-single-spa (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a9af818f322b10614f05f0798d081607acaf0edf591f3bc2ddd3fad0e4d3b10 Any computer that has this package installed or running should be considered...

MAL-2025-48084 Malicious code in vn-hrm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7e7500ba0af4e9b2c0354a3820e7c28cc50ed3e9092db9e4c3c3cba3958234 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blockscout-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df96f7696839c4588380c2ac801ba26b9a18c28692bfcc3aaabf0e05edd9b8d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.2d.pixel-perfect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7a67e51f9589346d26c184ae8ec584a2a6433b25cfb0189e71ba2ffad5f11d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in affected-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d28082ed059e68e9aeb19f28b4d928db94d6f5392467f2fd362a468fd93bb6e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...