MAL-2025-4927 Malicious code in ods-core-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c864e00fb5ed04b7160b6804c91bddefa43500c877ad9e889fdc397f89c35721 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4865 Malicious code in processwithcloudevents-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8c9351acabc986c61d13f3792948c4426e4f75423a912f6a4cd08f046bdf07e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4818 Malicious code in bs58-decode-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 365e9781bfa38295c42e9eb63d2506e4d79922f9040b5ca8f39544eaab056c91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4775 Malicious code in vite-plugin-esm-federation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f7926dff38c759aa63ad9b55035d541c0512f6796681961dcd734e4d77cacc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4888 Malicious code in springboot-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 767553d0189c47e072ca2eccece5b848745a1f6faaf34987293d9232d32f48fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4851 Malicious code in mediaserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15084239e2cd202b683ccc27fbc1eca45909c74e4e992b9d5e646ccb07c3cfd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4877 Malicious code in rpc-bot-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36bae9a92f55450da9079525255c532c3077ebdf05866aed4790c5cdb1fe64b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4799 Malicious code in @loybung/hyper-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a646dc40194d6a79d5af905b5f0de4abf8ac46c73d1f0659c50454fa2ea9353 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4802 Malicious code in @loybung/provider-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dc5e2aaa75780249ef49329cc88e74468511da4956872cadb22549951afb87e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4801 Malicious code in @loybung/launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4338cbadeeb701c891e1235d52d6204c2fcec842a555133308612257b8409932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4911 Malicious code in yt606060-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a34a6e4b5985ebe933d9f77c07d0caa2d2c46ab01a085ddf49c79d900474f83b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4856 Malicious code in nextjs-insight (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db00088e31ce8475190f64475d3a917f95185bbf176e0ac091fe160399ce6f92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4870 Malicious code in quake-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fc94b03d9c8d469f9ca333a3c81e540147fdde58a3597b8514b5c771884fe3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4819 Malicious code in bzl_components-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e9d92ea6bf2f83b7f1ef5fda995c4ca9b06ee0c6e4666b1ac581d884dbae28f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4907 Malicious code in vyre-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57da43ad0f9a21c167b302acb7f928a62f1ef095d41cdf9621fbe8424fd6cbd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4867 Malicious code in pydantic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb9e1c20553202c4b4edf9fe0ab41cf161494ea68d49f7c930d8a5059b6543b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4864 Malicious code in playwright-coverage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf8711293d366c2ab04b98c26ea6e6fbc5022a045727404387dc51c9496cb328 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4861 Malicious code in openssl-pkcs11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79dc9baa4004010efe414f668e04f952497b63704184784cffcac6e22d8ce16e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4854 Malicious code in ncftp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bc7a5d34f3860004cbdbf4f622418fa2383dd3ba5ebff2ed2074a4a13d1b85d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4852 Malicious code in meteor-react-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10edb5e94e2b6aede51af9b2525726341571187cb32e9a56e9b86639c7130341 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...