MAL-2025-2584 Malicious code in vscode-typescript-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9162b86c7482b306e1b5ef08b17ce67a14c45fbb9ae585e6113b17174fb27409 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2568 Malicious code in cargo-cyclonedx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 310e72b56f73cd7a869e3c76fc0da1be55d3e187c73cca623ce18ea3107f992c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2567 Malicious code in azqr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb71a6e47211aafef20b598bad3d2ca81ae69098aa95f8a3a61f8edcccf6cef9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2566 Malicious code in airbnb-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0300bde98e64293234ba880a6e80dbe97bf5d348a18cc288de3d963e8adf768 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3143 Malicious code in arnotest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64475736790097a8b2e30db87aa02796673e4a50b3af8e0d633eb261ec376983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2554 Malicious code in ethereum-cryptog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9b4f4e2a3a4121480300942e01892de5c8f71fbecf3f907eb9512d09b0a0a16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2504 Malicious code in ember-inner-addon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bbbdbcc5d40cae533849a83ada31138fdc88cd05fc5f9a44dfe836d0c028837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2524 Malicious code in plasty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 101f2171688036d97dd4a9278f0e3a13ddc39853c5161ece25ac283a619b19ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2502 Malicious code in cortex-player-chromeoscortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eac24897ad3708804e4c682a41b73cad1b18c268949ae2fef6a63b4b6283f0db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2496 Malicious code in com.unity.connect.share (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 973f1206279f82b54e8bb53ea299d67bcf4e4a49b81384db6196d292119d9604 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2495 Malicious code in com.github-glitchenzo.nugetforunity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61726796c4ca9b58f4a90fb14b096634a49abd1ea591b2f740cecbc02d5cb0bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2522 Malicious code in picl-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4b569262c76f6758ee536ea5f00045f5c221b872f6e159339281754d0551983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2497 Malicious code in compliancereadserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5393d59c4341633c717d7af99e6afc6d7a1c673541cc84a0eb255d5d30434313 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2470 Malicious code in pdftodoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14520ac90732a33be79f604147753e91fe812ad121b9fffa4b573a6e6793ec50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2455 Malicious code in attacktree (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da476a4c6326fba7be03913b209024e9c2bb6722dc57b4f960812616dc161f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2473 Malicious code in shorterapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5eb942dbb6cb91bfe5e28567482dbc8642287b5e070aa027795d9bc79949d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2431 Malicious code in vue-plugin-rely1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41339a779b006586f47ed496d71acbb4b97bf4174fdd98bf7aced85ed56e6c4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2408 Malicious code in rekilog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef04608cee8fdce58cca876b6f5e7cb4753ad72459148b7958b20c8526434769 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2433 Malicious code in winston-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9a7a8915407cab1038d31144af0dc322ca271f4ddcd30cbf0e040dccc9b7dca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2404 Malicious code in razorpaysalesdemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 758506f6873d4c4b929bbc6e3411c7eaba0686de15eaea017bc724a62588458d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...