MAL-2025-6139 Malicious code in @jaswanthlanka/mcp-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a96465d6f11fea13f3f126caaae8862a9a670604bed80b2fae713b7d4d241342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6182 Malicious code in mydealer-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54d329ce146d06334e3713a20760ac8315306e6cde78b8ebb0394b443ea83a60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6183 Malicious code in navigation-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39b1dcf034a843e18501251d3a3e0d37d413b30645566c5a4c80fc17aee8cf15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6204 Malicious code in user-interaction-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d839a2d1eeb7984171b027d6824db93e6a9c11b45cba2883397dad6bb7744e8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6150 Malicious code in apple-psh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 041d9bb86cacaa2662e0692402d62b7779b1bac94c3aa30bd8f329fdbffba6eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6166 Malicious code in internal-plugin-telemetry-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1d9d94ab30d6ec88b722127b9f7fcd84c80e7e5bc2fda3c7865104dea4a0fcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6174 Malicious code in kiwi-module-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2065b8ef87a0ef23f1d6589f86841c8e890785f615a13d214446f9a6feb1b4ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6176 Malicious code in kiwi-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dcbebb4e37e86a0a7878eafb520d0acd1ad5d8a97aabcce547b807bddec6cef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6194 Malicious code in scenes-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39e4ea55e37dda98df207b010b0fd6e64dc467ed051fa91d18337a7ea9e46152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6165 Malicious code in grafana-scenes-ml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9f05300f7b5b25cc847cea32bfd7f5e7f72a070edc80e219d4ec0c2e87116c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6196 Malicious code in scenes-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5cd330b48a21b8e14bf5680e109fce03486949f6eef75c9e430fa4fc318db74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6152 Malicious code in aws-iot-twinmaker-grafana-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c4ed5abc6b9aacfab44cd41a0d5b9609603b25a6a318e051d71e9efa218d851 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6158 Malicious code in dependabot-auto-triage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d0f3b4b8521203a882b46f61419d108cb731522a0a8c231bc89b22406803057 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6155 Malicious code in community-pass-react-native-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45d465e1a0ba3936c02d875635041ba0362e96dee19c7f7d727391a4bdcb5dc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6193 Malicious code in ppsdkconstants (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc09f5bfdfd7725488af3e5502891485f650447a780f7e5ad6f839ae7d3120b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6017 Malicious code in evmlogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7f613dff9c5a8240615af13856874523566cf158ec5fb8209a17f98b2359c50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6003 Malicious code in sol-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f54238c3d0c543a0c99cd8dbe4ffee1a2ffe0ca8230dbd0c7a8f521259f38339 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5991 Malicious code in lunasec (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52ffe1d0846a694f3b7e75d9064515e2cb7a42074ea0b54d8077d5bdb0cf3993 Any computer that has this package installed or running should be considered...

MAL-2025-5988 Malicious code in router-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d79988cd859092569021535b2a0ed329cc589611cb68ee789a342c0a1b0945e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5871 Malicious code in @gdcorp-commerce/cx-orders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ce80126682f56a0068ac541d5304235859cbf407b6945eee895e676fb186858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...