Malicious code in @things-factory/auth-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db891d17c83cd814d4976534e1ff8e7675f41f0c50baedecafab80bcdf4156fb Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @hestjs/demo (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d07b84a8fad4cf98766b909452076e1349e19abe6fa8b41b3a2d3326650fb05 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @things-factory/attachment-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2fbc742d9dac7f03e5dbac839d5f3d41c70ac7040a8a34a0a7d8164066154b2 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47387 Malicious code in @nativescript-community/ui-document-picker (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 46d11dbb6f2ddb5b46be5e63a827af98e3f887baac9c3df11be485d8326089b2 This package was compromised by the Shai-Hulud NPM worm. The malicious payload steal...

MAL-2025-47294 Malicious code in airchief (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d27bcc3bc35dd516704520eaafbd086947c4ca78d0f28945786da155acc1a73 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47256 Malicious code in @operato/help (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f6886d19c6aa1c28eb93f17ecfde91dc47019cdc7663a5dcbeba05d551c7315 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47241 Malicious code in @hestjs/demo (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d07b84a8fad4cf98766b909452076e1349e19abe6fa8b41b3a2d3326650fb05 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47382 Malicious code in @art-ws/prettier (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0ad654106f2b917f883774d7484c2a6e0b8321808a7693b56ce60c52eaf85e3 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47389 Malicious code in @nativescript-community/ui-material-bottom-navigation (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security c1599f8fe4dad02bc9f083f9d6c3af166818ba3a80e2bb13c37a4052f581b81c This package was compromised by the Shai-Hulud NPM worm. The malicious payload steal...

MAL-2025-47371 Malicious code in @art-ws/common (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a490c632daaee5b64f871466f63aae92473f9d088ce9c7d1c40cf9a7de5de0d3 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47240 Malicious code in @hestjs/cqrs (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c115992eefc51ff69abc88f9b1b99c8934c1d03e4a724bdb430fa22e942a45ab Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47254 Malicious code in @operato/data-grist (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a7038daac23a5335b1d13ffbcdc73d86e9f05d9fbd36e186c78bdad7aad669d Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47361 Malicious code in wdio-web-reporter (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab54ef5f776b95eb6610135fb736bcc77ce0ed9cc7ec79b805afe3498110fb84 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47392 Malicious code in @things-factory/shell (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ebd494f09184269de61b62501f8b32bfc56c353807f7e7356cecc35c5ab1346 Any computer that has this package installed or running should be considered fully compromised. All...

Self-Replicating Worm Hits 180+ Software Packages

At least 187 code packages made available through the JavaScript repository NPM have been infected with a self-replicating worm that steals credentials from developers and publishes those secrets on GitHub , experts warn. The malware, which briefly infected multiple code packages from the securit...

Malicious code in @things-factory/env (npm)

Suspicious postinstall script executing bundle.js and YARA rule match on bundle.js indicate potential malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88b8463d9fb16ac5faed1cd122997c683cc79534786bcf816139cefc13897168 Any computer that has this...

MAL-2025-47221 Malicious code in @things-factory/email-base (npm)

Suspicious postinstall script executes bundle.js which contains code flagged by YARA rule unsignedbitwisemathexcess, indicating malware. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cdc3773013abc63a59090ab3b457bc1e047f7a294edd5f35e6ce43840fc0520 Any computer tha...

Malicious code in yargs-help-output (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1337d3becd83c0b3dc233069268371bc9e7395311560038f52cbe73384e4efa5 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47366 Malicious code in yargs-help-output (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1337d3becd83c0b3dc233069268371bc9e7395311560038f52cbe73384e4efa5 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47328 Malicious code in monorepo-next (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f0c8e880c0edcdf1ac8b55ac831ee123c7bbd6b338a44a77a49400b60985d16 Any computer that has this package installed or running should be considered fully compromised. All...