MAL-2025-5695 Malicious code in geothmetic-meandian (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1c6e9fe28508388766f59433979c280204a76b3dc0c050edc461273450f6d1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5687 Malicious code in fe-comp-input-text-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcb443ddf0b8c18bdcbd7dcfbf6b8e3c2a5ba2614ea22acf4310735a82259d51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5738 Malicious code in web-shell-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14a8faa45f100dea81a84d75a0d68c5e05035913ff94a69ac46b8cd9429c5a81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5684 Malicious code in data-formatter-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0dd2a4d0c8101cf1e6761361aea7bc9afd9d28010878e44622da7af6fa3dfd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5660 Malicious code in @bosch-iot-console/rollouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a7c59a1a8e53130cfd7701d08a305d5e478e43a2a5b39f57258f504069f050 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5736 Malicious code in vite-tsauditlog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 830e528439887027d65ed0697132b3f91dc2b11e553dc12671446d5f6eea1b2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5725 Malicious code in restpilot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea95902e229e600fed776ab58f9216738dd1db24c03890b9902da283f3413623 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5711 Malicious code in oauth2-bearer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3aa2d2499cf414a068a46af982e2179810f9ca6fe985bc099dec22b8dc75469 Any computer that has this package installed or running should be considered...

MAL-2025-5617 Malicious code in mre-config-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22474e36d4ddd865818606c920d894196687008fcb57bc5488c2c682a801d5a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5615 Malicious code in auth0-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bb8364e4a661d732190dea931ee1bd3aedea3c1005b1daa41507601bb281443 Any computer that has this package installed or running should be considered...

MAL-2025-5604 Malicious code in n8n-nodes-zalo-tools-vts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2329810f2a1823ea41018ebaecc3088d17c44d6b40443b63ba8cf17463f898a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5601 Malicious code in n8n-nodes-simple-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 135883bb204e44d7cd636264bc588abe6432b574585bb5c71862c646e233997b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5595 Malicious code in oft-evm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware def6b1ca6cf833bd60869e2d69ad50ccb4916998a60f302f0ad89bd0076da661 Any computer that has this package installed or running should be considered...

MAL-2025-5609 Malicious code in pupeteer-cluster-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fe95354a3e77909ce12723e8b6920602c16294ebe131716c947de18ed799d18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5538 Malicious code in k6-studio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b163d493761fa12ed8094157415651ec1b22824f021a7483637346825e08cca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5575 Malicious code in react-babel-purify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dff19821615932cec55e91b56b5ef7b8974f053d6ec9dab32417601d23391b52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5563 Malicious code in json-cookie-jar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41f728e1c9ab68496a0fe986aed6d7eeb7a4ed694379b812a032240c95e2e39b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5552 Malicious code in env-info-checker-kyy3w4fiurevd8uy43wfre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d6fb3feadb029e83e642c54a8ffc29782d65e981a2bd769dc972463231215b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5556 Malicious code in frontend-building_blocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28828db7648dd2c99bf1bbda884e9f12b8f0a60ac0068a6c12e5ed0ce79cb651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5588 Malicious code in wp-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bd25807808ab0722baeb487925a65428a1198b9ff17c596ae5c3a7ec1d05161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...