MAL-2025-6373 Malicious code in redux-eslint-saga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d08211092766c0313df71f1e2fe6fa8cf606e4f36570679a1391bda0a5dfd6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6370 Malicious code in react-icon-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46dc16e0765ddb06bcc46c49b58deba17ff9d4fce6cc5b65ebba0f617cf44fed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6363 Malicious code in json-confs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeb598462f7d5aa755a41083007142a93c31fc7a61b70ea43c88dcefdd53025f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6377 Malicious code in vite-plugin-reactjs-refresh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4abf589cdec43e8ba609988d38155d5965b59ac6a83b1d251405fdf13629cdce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6353 Malicious code in @kodane/patch-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7695fde6cc3a35bd130bcdcc096ef89e7ce312c36cd9e0a15ec986d9f516873 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6347 Malicious code in yaetia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d95f6b127a40fcc4c4557dc3e26a11a6136d8837c28b9a32663f3a7a14a1c13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6338 Malicious code in @sys711/my-npx-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4c05684044741c67899c2f0bd5728540fec66f7e4f62a44542006c938e0c550 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6340 Malicious code in react-redux-stylizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a197696811f0bf0075aceaf1c780dc72528144a4fa028d9dabdc7f6999144f42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6344 Malicious code in tailwind-theme-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 800ed10781a721a0031fd7d044868ae828f7d28ce7f12d2953af3b6bfa3e3412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6331 Malicious code in bfiweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a11eb7ad8cdb090da115fa0307b994c6bfa5d824813589cb551dbb956c8607bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6243 Malicious code in grafana-internal-config-loader (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 031305432de00d5ead02ddc27a8482b7b62a8594c3d2b71961716b00672d654f Any computer that has this package installed or running should be considered...

MAL-2025-6282 Malicious code in dndattachment (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d5607dc7a2158eb1b89fd59ca4547165e669f8047898b2735880390dd62a9dd Any computer that has this package installed or running should be considered...

MAL-2025-6234 Malicious code in nodejs-backpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb99e7712a778eec132a6648afa1e407630ce06d816611aade3e1e1986562f0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6279 Malicious code in db-connections-templates (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21f6e4f8c7542ce167e02d0a5da417230f30a924d39fff85b921a65f07baa938 Any computer that has this package installed or running should be considered...

MAL-2025-6216 Malicious code in bingo-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96e6e47500342e1cad70444862565ee48be2e2fc9f3d0e7dd92d8e8c662a231 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6139 Malicious code in @jaswanthlanka/mcp-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a96465d6f11fea13f3f126caaae8862a9a670604bed80b2fae713b7d4d241342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6182 Malicious code in mydealer-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54d329ce146d06334e3713a20760ac8315306e6cde78b8ebb0394b443ea83a60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6183 Malicious code in navigation-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39b1dcf034a843e18501251d3a3e0d37d413b30645566c5a4c80fc17aee8cf15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6204 Malicious code in user-interaction-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d839a2d1eeb7984171b027d6824db93e6a9c11b45cba2883397dad6bb7744e8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6150 Malicious code in apple-psh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 041d9bb86cacaa2662e0692402d62b7779b1bac94c3aa30bd8f329fdbffba6eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...