MAL-2025-2691 Malicious code in mm-react-gpt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a777feae3d9f0ba145555d872c6749a18d3f877dd9617efe5a5856eb06a366e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2640 Malicious code in adfg-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b55ff503acc60e4d643c5c89cdee6d5683773652723b957ff0a501cb1e493e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2708 Malicious code in sfdc-timeline-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6099a9e2fd25dfe324a6db815b7d65640c90a64985ed7b4a53d80cd2e93fb76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2689 Malicious code in mindbody-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e37ef0ad0fe9988ddbdaac4f3d9be1ad02f040ef04bd54fd5ffeb9ff266d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2633 Malicious code in @sensort/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dcd07bb07971882b98c1d3a975179dac6c620077f929f4d8d579c511f38b89c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2637 Malicious code in @sensort/router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fbaa1095630e7dacad6c76d024d3ea54744e245053790df146c0524358fa9b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2631 Malicious code in @ptc-ibm/greetings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb6891168044d828b2b9141fda25b3b167300de37f009d47a58577c4248163e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2626 Malicious code in @ibm-ptc/greetings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f71d576fd2d90654e6e24915ecd219a4f6fe2c520a75b001e662759aa3b850ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2672 Malicious code in formio-plugin-offline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2195f823022f5391d8bba5f8d4b40e82fc8c55a5a8521af8cb92add5c9317bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2678 Malicious code in intercomexpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ea73dc55cc76e35e3e754bd610fbdf5608dd0876da67ffcb09a4c24d6e3cf78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2647 Malicious code in blockzie-blocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4da1a7f59cd66ecf84dc953f33def62ebeb1b32c0d526a2d32b361b967d20dbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epic-react-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d43c90ef27f311e9b6bb49fb715a80a16f68e0adef519b5f389a00ceeb8bbf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2616 Malicious code in default-shared-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf531d5c01de5684ee7710ddc70fe7e2d6b8960616b4c3d8973fcbe9b97f885c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2568 Malicious code in cargo-cyclonedx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 310e72b56f73cd7a869e3c76fc0da1be55d3e187c73cca623ce18ea3107f992c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2567 Malicious code in azqr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb71a6e47211aafef20b598bad3d2ca81ae69098aa95f8a3a61f8edcccf6cef9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2584 Malicious code in vscode-typescript-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9162b86c7482b306e1b5ef08b17ce67a14c45fbb9ae585e6113b17174fb27409 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2566 Malicious code in airbnb-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0300bde98e64293234ba880a6e80dbe97bf5d348a18cc288de3d963e8adf768 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3143 Malicious code in arnotest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64475736790097a8b2e30db87aa02796673e4a50b3af8e0d633eb261ec376983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2554 Malicious code in ethereum-cryptog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9b4f4e2a3a4121480300942e01892de5c8f71fbecf3f907eb9512d09b0a0a16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2504 Malicious code in ember-inner-addon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bbbdbcc5d40cae533849a83ada31138fdc88cd05fc5f9a44dfe836d0c028837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...