Malicious code in postman-json (npm)

The package postman-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63e81e735aa1583841441847e7de0a269d581efabcfdcdac7cb7d6afd64df258 Any computer that has this package installed or running should be considered fully...

MAL-2025-47560 Malicious code in internallib_v714 (npm)

The package internallibv714 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949e0eb9d0a4f2ce9f9738485e24ab728066c412cd31cbc7445910a5e2709571 Any computer that has this package installed or running should be considered fully...

Malicious code in tailwind-mouse-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c878282ff4bbb3aef14ffb5e31963987ccfe6f981778c39c7e696435ee7422e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47503 Malicious code in tailwind-glass-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba68ec55869f324e11415be61a3a4240222a1807115709dc91804e63fad98452 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-vite-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c53bdee988880e8c288daeff8bb041022f69c78319375b597edab208129e0621 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in next-plugin-uni-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf38f21fbce8422c8375fdbc547879dab7eea1a9773a78740cee14d4919f95ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47299 Malicious code in conditionsjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0435e7d1dfd8568f73471eb3a1fe65cbe2e5891606cc0f64ace4156091c56cb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47333 Malicious code in oci-console-plugin-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19ce011b024c9c3dcf78578cbf559de94a96364525ace53ce28457dba2053bf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @rxnt/phr-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 947f7c203c3177bd72a083fb5900eea77703e68cea6fccaf8fc27d871dfa65ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nativescript-community/typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f52d32f97f0c022f47383943d101a89ef5465d96aece46233bc2005a4c14d6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47171 Malicious code in @triniwiz/nativescript-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dee524a059c5be768ba0f921b02cf030608c6377823ec2fda73727e66313248 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nstudio/nativescript-checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ac10be560243885c47e80e47d545e8006f285d8fe9f5756c7b92f9cd2085639 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nri-kube-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd41beeed007957825a25616c5f002d1a7eb247ed5e96855252aa22c1de77479 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47175 Malicious code in basic-validator-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a065e2ce3dcaa4245e9bd8873e7878385dbe7a3fe9aa7276ae5ac89686209889 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47180 Malicious code in http-req-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05b36301096608673130a0c0ca70710e71d19aa1f1b849b330ad9cc03911fcbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mse-eme-capabilities.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35ba0710a5c55a2abfbe4d0332047feccf4ef80e6d7d98203473d6eec8bd1d8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdk-ethers (npm)

The package sdk-ethers was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51e62121be288d17f6614fc45dd876ddc687d28a7c8b1ce9f6cdc856ce94693b Any computer that has this package installed or running should be considered fully compromise...

MAL-2025-46969 Malicious code in chalk (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 985b6546ed08c8482326a4819faec318c27c1f6d7518acdf384d5f5a8c1453aa Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-42145 Malicious code in logging-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0433a58c0d2019ba753b2ac69bc12319ce704bc3fcf7ff537ccea2164e1e8f31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-42138 Malicious code in mathy-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40181e61c8885579610a7982c1d9bb6de781022905e9b58618fd8206ba45347b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...