MAL-2025-2172 Malicious code in fdc3-web-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ea3a43ef3e6b3ef461c23614ec97c2fdcb96b58abeac841b4ea929bbab9d2d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2197 Malicious code in totem-project-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8e4f8906dbfdd2a20cc7cd9a3d92b2b079381e8440c9d434a5ad4767dbc176f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2082 Malicious code in @siemens-ag/twodc-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caed869480a5b1f4b83514a80fe6c2c3d77bec3511596c689111f920661d0be8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2077 Malicious code in @fcss/ui-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7badd1358c73b5aebf13b4734aa71ebd55fd281b1a1a05a7f60e7890e6254741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2091 Malicious code in angular-identity-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54c4b1fd6456e049589f15a4f03fe3fdb5370f3e9d0d66e8664835e3c7cb5f0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2078 Malicious code in @roku-web-ui/header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d972abcafbb5cdb123421042b1ca014e972c5718f25d35adc6373ac794bed78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2134 Malicious code in upbit-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7391f484ff16261f5d67a14345fd40f488d3bd82c97ee08473b69af879adc46f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2112 Malicious code in latoken-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 114715a83c1f9537c15f2feab2c357a4cece3c946d5295dd133ee53efb347fd6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2110 Malicious code in latoken-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63cdcfe3b15d2c174d58b54998cf056643085f18de21eda41bd23e4cc3bed7a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2142 Malicious code in whitebit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 281c3a63872d73a99ed3e71fd5a15acbbc2551f1922b2b295939ba05ff4b685d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2114 Malicious code in link-outside-nest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60138fd924427918d630cea0c05320160d12aa498336cbb87a174ee5eb2231db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1904 Malicious code in my-node-startup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb8ec8a8489c99789cfcd7c441e3dd1e95c4380a18f1e53144de9f58cd025b7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2054 Malicious code in tg-shell-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38c69457497c0691d6d8e9fd41c25a9a61cbddbabee9cd66faa2d7ddc05045b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2046 Malicious code in ossar-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8bf6218656218d743c04b66e989f4f9615fcb7727df4d40cc13d4dc4135a4cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1775 Malicious code in common-typeface-termina (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 193842681a528ea3a616187f7dff355372eea1f8144257cc73c7d73d9b859318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2039 Malicious code in eyeglass-multirepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 515d77f526178298da65e48e6b4e433df01250b2c88e22e6f533e41fb0344bd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2034 Malicious code in com.frl.aepsych (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4e1684783c900a2076b5a9c57dd33a1495ca2fb4104bcd91e856a42415f089b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2030 Malicious code in accept-a-payment-playwright-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a7c8fcfc301cd02159a59241fc90d212ace8d247570cbdd7b66adffd6579d05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1850 Malicious code in initidiscord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3c2131052faf52224eb8aeedd0988dacb847496eec29272ff7053a01a11c3db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1776 Malicious code in consumer-platform-global-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673a0b607ba1bc6ba23ef4cb90ce7b66e03db02b377733960c524cf6757b4c61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...