MAL-2025-1631 Malicious code in tfjs-backend-webgl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 394beab3692bd8a9cc0902f84d10854738b137e336a125a3be59345d8e13f284 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1568 Malicious code in actsearchserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6c4eab78bddce77aac2f34051b50053de02bb1863af9c473abace0eb438b06e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1601 Malicious code in jaws-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef97004c02a81ddc0d6afb6b85005d92b395ba93911614fbabdd1ab2c1736de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1634 Malicious code in ton-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f43718ee3297ac779c4afe0caf05923ca62f75fa0eeb7432c978b903ffd9794b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1594 Malicious code in florida.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3d7e6be1bc774c1ef6319cadd069a16f80c91ee44eb6b07fdfe088661f0b0cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1618 Malicious code in package_events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74ede61665484ec6970f2d593a4363c19f20c93d1691ce47bbf4f7e6e1a8f3ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1573 Malicious code in basic-data-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1226e5e77825d2e5d196dbb1155230067191bfad4c3777ba65b50ab5a95dc9e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1572 Malicious code in auth0-nodejs-webapp-sample-new-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66ab3d3775ff156aa2978e726606e002c0b7d2673ea1667898733604c8521491 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1615 Malicious code in multipage-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13f2d0c3e5db704d6bce0de0eb2729951e279aa28be75eafa0df32e85a38e3c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1575 Malicious code in binance-connector-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41e39728f8654e35cb29f5b837a886f3a5a9ff0dd9b523fc1777672083ae645d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1571 Malicious code in appauth-angular-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42efa6fffab7cf932595ca803e264928de2ca477fd0603ac14dbe52250cd10d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1580 Malicious code in cosmos-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6053f00c9e4d23811647b64304eb319d346117494a434dad02865fe92a7e68e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1613 Malicious code in merchanttoolserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5064980441eee945866b35b80f2f2f2935f077673a4fa8f15c147e7f043c4d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1607 Malicious code in mailu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2943df57730a433ea5c58cc936493d5865bcee7485445afc4ce047d8b845c89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1605 Malicious code in liquidity-bridge-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f40a6382779a7d45d5a09b615daea39485cff80a3a6d9b0b8a1b5ad3f68d4ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2234 Malicious code in @supera/aaaaaaaaaaa (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d347fb8b1e6f331c8dc5ba623c0b5f80932085711d95fd7e3f209c5180b5f79e Any computer that has this package install...

MAL-2025-1486 Malicious code in jetpack-e2e-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe798df756e79d2deb6db29c4675b6e0255d8d3607198c924e2ecb4a485b671f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1487 Malicious code in jquery-real (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b8ff49544d48bbc5cdd24a029e34388a93fed21433a09e77f5f27dfe19cc1b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1493 Malicious code in pinot-controller-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83ea1a5f03364deddf9525a13146b4cf1bece3baf1ce56a10c1ea5e424f6aeb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1470 Malicious code in mygcpconfusedfunctionpocmaliciouspackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 716d3d7344ecf41184b8427f14e96e4bee1a868051bae909e0f3da2fcea408ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...