MAL-2025-4076 Malicious code in dexfile.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 030322be28cfdc4341c3cf0199d441c986dbb8f4eee5783c7838c7c6af53a011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4073 Malicious code in create-qr-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58919bf64984f8dcdd4ec2802325f47fd7ef1a21aa8f1cb4d9c64549054122bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4061 Malicious code in axios-fingerprint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da96d284cb0fd11d177adc33e418d9729904db0a800e7a782c173dfb4901941d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4058 Malicious code in @ducksthegoatedone/ducks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07996ce8fcdd695995919d84cd1d62b1a127fab349bef9399e413b78c2ba1fab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4101 Malicious code in loveisbad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36fa8a1e12bbc84c5893bd3d80363dcb95e903bdfec8cfbe652082141fdad6d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4057 Malicious code in @confluence-classic/confluence-frontend-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cad26a08baa688242974598d13ff7ace16ad461012cab483bcadedb84953fe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4056 Malicious code in @confluence-classic/confluence-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4ff87b5122db88c06524939b2121d0aa2b413227824f46f1813bbbcc3f19d78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4119 Malicious code in rpc-selfbottt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9c64c2b69b111e1ddfc8dc99d780ac832b4148262e160c4f68270f30c5edd33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4142 Malicious code in web3walletconnect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6379b5bb35b541783545d3399d145213c35e8db9351a2ba95b8ef457db094e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4031 Malicious code in untitled_flourish_template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eca89dddd0c14d44ef018267a857a52c3061439e46d4efb3fe64bd4173005dc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4039 Malicious code in wdpr-ra-javascript-native-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e2b40d8e2ee8d311cf5e007c4480255217d359bdde3c42115e42ad42f35dbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4002 Malicious code in ing-feat-transaction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b877e68ebd0174dd21b5f1e3afb284802ab840642a65f9ebaa5c4cc5293e5ef8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4005 Malicious code in ing-lib-investments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 503bea11cdda0462a5a3704bfa53fb30372f852aedf852305e6826460f1eb140 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4004 Malicious code in ing-lib-hybrid-advice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43233b9c11677a5c79253413dc5628b4dcfaebddec6db40219fe7581ae14e288 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4038 Malicious code in wal-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31f1190c63c1f6bf955ab1d1638b199634786321614c27c73a56718a80770295 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3989 Malicious code in dasjhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90eb199686c875a0d5912d7e7704ac6722aae5e383dfda1a22b0811b82d7015c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4027 Malicious code in stencil-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63d683888e04619d454cbecb6bbbf03259919fb7cb2a3ac164deb94fd37938d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4018 Malicious code in say-hello-npm-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e0eac5e92f8a98fe25febcb3c44e78e8b816e619470dbb45f8276cb67cdac7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3983 Malicious code in arduino-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d38c56c0dc9db93761b7dd740096864d883277825e27bba160aa0734be2c6b30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3990 Malicious code in directx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89c6fdb82cd7b28af322fd42d09eed2c86ab4e1893ca7bd21111555b14057428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...