MAL-2025-1393 Malicious code in bithumb-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 486276686eda2f4f675b363605d7e934f7665dfbca8a85f49d8b76a801f7ce43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1392 Malicious code in bifinance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 215be0aa7f45bcf1c941e1f692cc37741ee6ed4e29f2e90ff62ef935bd47e929 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1426 Malicious code in orangex-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e602f5938bee28a86f24337d394cf7720c3354700e633b8fb0d3ab2c13a83c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1421 Malicious code in kcex-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce9b582a4e9a1941b68d4f5d683d97c93a4bda05b8d494dc0bac426302aa4f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1454 Malicious code in yizhifabao60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32fa0d2dfcf257bafeb5a31945cec97ee3b47588cb115fe2f8dc52e8df6f4374 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1449 Malicious code in yizhifabao55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 185d2f62a8857d3e7f999d149e1c3f6ff67133772af665b6d9a44d56e5b82eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1444 Malicious code in telegram-bots (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce26b83a8f4eda763f723d82a057158e8b6265de39b789ca17e5d38884401cf8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1381 Malicious code in ts-plugin-file-path-support (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a29c99a3decf55fe58b9d10ce858b903ae55f7d999f98549a8416b4c12352e65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1373 Malicious code in pages-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8fdc9ed5e9c2f9d6d0e57ed2a060d76ead69858fcbae60c4265500ef4dd1527 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1378 Malicious code in solana-web3.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae0ba85746959ae8f7ae3dc7a934de9e4cb299669dbb270322fa2d8871fd8326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1369 Malicious code in node-tg-bot-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7691b80bd73d248d18ca3ab676ebf09d22c6e9702f8e80ec44aa70b3ce3ec020 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1370 Malicious code in openbet-player-api-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11f880dc4e1451453507ea3db6a2cf42a292a1e81dfd3df5bed7a77d00bb84a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1268 Malicious code in reqmanagemedifdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97e2cacdc4d9372c4099fc0e97f74387c54414cdf62323f935941b445a2c3e9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1262 Malicious code in wasmer-term (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e66b8e03768b197df9ac09bcb9d0dc5b58d3bf49ea8d2474649c6aad97e9f18e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1240 Malicious code in afip-example-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af458f37f8afe450febaa14d76f15345bc5fe0f83c274593a481ac82dcc0bad1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1253 Malicious code in nebulagl-h3-hexagon-editing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbf7cb7b134f7a3699367939a1d01f6863a30cbc599d8973b3c57509cd51c9b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1248 Malicious code in internallib_v185 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8939bc2acda7e18713b6ff48ec41b70f18201a851beeabecd0e544cfe80430c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1245 Malicious code in fluencelabs.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c3788072d85296aa9c456499d5d0923967e28690fd1f3dc6d3fb8e00c2ee33a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45391

Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file tina-lock.json. Administrators of Tina-enabled websites with search setup...

MAL-2025-1145 Malicious code in libhash-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b2e27ca6bff082d9645b924364c7f5bba8fbfa574d7f60ffe823a7c52cda079 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...