MAL-2025-4317 Malicious code in com.unity.cloud.common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46d26c76ae3c3c9d4f0975262f4b276f17bdaa1b436737ff8fa006f42576d8d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4333 Malicious code in dev.voltstro.unitywebbrowser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69add9c69f66a9fa7c5f3de6fa791fb0fe2f072260ad4786afe153bb26087943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4305 Malicious code in blog-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e572e251b32145d6856f8000dca0bbf112278ecc3f967ed61626010e0a0f9c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4324 Malicious code in com.unity.netcode.gameobjects (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 131cc29f9c925613b77fd6e6c06f43433bdc5a9511461af56fd519562408c3c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-11872

The Cloud Functions subsystem in OpenTrace 1.0 might allow fabrication attacks by making billions of TempID requests before an AES-256-GCM key rotation occurs...

MAL-2025-4574 Malicious code in primereact-sass-theme (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc148ba6f2b6ad7d439003a3b980ba24d27a619fda1198bfa32adfc54d5bb350 Any computer that has this package installed or running should be considered...

MAL-2025-4289 Malicious code in vite-tsconsole-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6727c1546f4afc56f343e8f3911a3679df15839cbfcb46f3f561c3de0faa06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4279 Malicious code in node-smtp-mailer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 460f9b722eb2c3fba92ba737575ced59fa0f516ba2b07451d0a847daf5c62bfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4281 Malicious code in node-telegram-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b37fa136531c0a67cc2376f7806ed7815076d3947395b944423d6bce51c94a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4280 Malicious code in node-telegram-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72079588d96648ea82b5bb1d6e2001a7d5b38d651e7e2589274433c93ae1eb25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4285 Malicious code in rest-api-orchestrator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e20a9fa0a651580cbe0e418726dea2ca91f1a44a78c7bb29619bcd10bd0e8fbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4170 Malicious code in cryptopay-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcedc265cd35c85d1f001fe8dc2c4da5d52e5a4b473c125b7883a67e797ff4f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4065 Malicious code in cdn-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d46d020b8f0a6ff1bcbb09ee63d0083f060a65c38e6f1d6518e860750e837544 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4099 Malicious code in lolnews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7215858bd520348bd1b650a0c7bfebb41fa47b6ca3c3fa269f18dbcd0b13848 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4098 Malicious code in lol-rp-raffle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00025362df4c28b05b43b7f7d4ef05b04b5ca52287e9d1df8b20426c4d68d0a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4137 Malicious code in ultimatepower (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79a2b1d92e7a7944260e21d39f2b6724e8903106957b245238be128a625245b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4072 Malicious code in core_plugin_route_timeouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d78de07f17ce59423078e4f2157d3bbc7034ea6b759f66a2de1858baba4da2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4071 Malicious code in core_plugin_b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b017d4d66c75e5abd747ac42ebec3611c23c459b9d627c55156dffafb700258a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4074 Malicious code in csat-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6108820bc94bf57a91a424d61c4704c69a86f807ea9f4993a63255a993ee8a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4097 Malicious code in lol-project-2017 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 713140b3d10253eb856068004fa4bc07dfbc38a48b4f0a2a706fe7c242284553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...