MAL-2025-4039 Malicious code in wdpr-ra-javascript-native-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e2b40d8e2ee8d311cf5e007c4480255217d359bdde3c42115e42ad42f35dbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4004 Malicious code in ing-lib-hybrid-advice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43233b9c11677a5c79253413dc5628b4dcfaebddec6db40219fe7581ae14e288 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4002 Malicious code in ing-feat-transaction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b877e68ebd0174dd21b5f1e3afb284802ab840642a65f9ebaa5c4cc5293e5ef8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4005 Malicious code in ing-lib-investments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 503bea11cdda0462a5a3704bfa53fb30372f852aedf852305e6826460f1eb140 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4038 Malicious code in wal-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31f1190c63c1f6bf955ab1d1638b199634786321614c27c73a56718a80770295 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3989 Malicious code in dasjhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90eb199686c875a0d5912d7e7704ac6722aae5e383dfda1a22b0811b82d7015c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4027 Malicious code in stencil-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63d683888e04619d454cbecb6bbbf03259919fb7cb2a3ac164deb94fd37938d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4018 Malicious code in say-hello-npm-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e0eac5e92f8a98fe25febcb3c44e78e8b816e619470dbb45f8276cb67cdac7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3983 Malicious code in arduino-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d38c56c0dc9db93761b7dd740096864d883277825e27bba160aa0734be2c6b30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3990 Malicious code in directx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89c6fdb82cd7b28af322fd42d09eed2c86ab4e1893ca7bd21111555b14057428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3977 Malicious code in @farabyabdulla54/wwframework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 878bbe6bb33501c07824e4ef5eedb3cb047eada1750984daab66b0e3d966b93b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3986 Malicious code in beta1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e33292cdfa414bc2f93c3d02239b3f683e7f41980b5a9efa884e2c836ef79eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3967 Malicious code in maddddddterialxtest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fba69f39bbe6232d97fbed1db9a38bd6a0de496acb93a26672b5bee18a28a307 Any computer that has this package installed or running should be considered...

MAL-2025-3916 Malicious code in seagroup-assets-management-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c44bc2e3fe919ef26fcd2d1f0c35594c222160c51fff19083d9be40017cc2689 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3925 Malicious code in vue-gop-authenticate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5f8092f5dd68ba9b719ca6f042e84c396704214bdaff421ce3f8b933fa7e302 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3877 Malicious code in codm-onlinematch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5f6fb5867fd54709c01f55a61e5186d80049d7aca83fcfe7b52f4ae562c4af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3883 Malicious code in driver-app-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3570e82c82a42968f9af1f2c57c421f5b73880688f83466fc4310325ecb60dff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3900 Malicious code in lcs-ui-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b66ec079f142a51c33d484015aab0384b514dca3415e27b84138f92dd2ea818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3905 Malicious code in meta-ai-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 230f2c424df3ca5115f3d575ba5a15c46f2a591f9a8ed4ec503c6bb5490ea355 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3915 Malicious code in rollup-plugin-remove-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 230bae792624cf6834a21e884402488ab15faca4797c79b7312463de4faf0593 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...