MAL-2025-4717 Malicious code in pay-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dab6c4477e3fd12beb2c023319675dd83f706e7347db70a12265b80e8e38c56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prod-shared (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 480110f6602e42420289e8da2e148e602ed3fc69063ba8c47edbcf8110c0c397 Any computer that has this package installed or running should be considered...

MAL-2025-4644 Malicious code in https-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef1ec069afa771aee14fdc9cedd50a8db0d66030e38f15897a5816782e20a892 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4488 Malicious code in m03124geeztd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b68dbf52968379b3612817a4951913aecc568c526510b1e8f52a5dacf51301d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4519 Malicious code in vite-tsconfig-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5982ed9c063bb8a7de718b2960f09dab6a1dea1be2cbeebd8a5f8c3ce94816d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4582 Malicious code in typescript-go (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d064fc87553ee2c99deda671568a19f3fd4d86e854e01e944343d89c70a99faf Any computer that has this package installed or running should be considered...

MAL-2025-4433 Malicious code in etherna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 878da0ca7dbd6a63e9de7b962c0012e3ca24afca42be819c3b86af0600939fe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4457 Malicious code in web3ether (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71eb646c8da392b6145a0d668591f463f2439263b4a3dca2a5ecd0d6848f9ed2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4389 Malicious code in prettier-config-rth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3baf2a5f3efec1eace5c6720887b40bd8a5019168357ff749e8eef0b03c4b2a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-native-scrollpageviewtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcee80fff21305590dcf04ace763231bdd81fcc2ef72bf8492ed79a60a17cd3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4103 Malicious code in migrate-lol-account (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88dbcb391cecbefa568dbffa3d4296d9fa09eddb14625e899283b70920acaea4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raydium-cpmm-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a68f5f91f0785da373b66be5a860df09b0d9ce675bc77749fe781b9d85d8a1bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3879 Malicious code in convera (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56afe2801be07df7d5829b5645331e9da9e3b531e3bdc930c293a153272cf864 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @johndeere-tech/helios-ng-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cafd54c91f17226053b5247b4cd518c79cc4e6462f2bf35455fc9a9f8b55c42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3647 Malicious code in slimdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2f226420f343b927fbc14d4e38eba517fc139753e2d5a7006cc0a251cdc8b0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in myexampledoges (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f73cffbd113f766f9b5e4d0a68d2aa94c67ed0b3521da15d8afab243bdf9e24f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3225 Malicious code in @harvest-finance/harvest-strategy-arbitrum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062f2e97a3824c2a6e95152cfe109cfeaa5426a6153438aad07eabee03820ba3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3186 Malicious code in fasteners (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fdb51a924fadc7b449efbc03766a7e23061654ad3fb298da0dd3c89c896e1b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3089 Malicious code in accessible-textbook-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32e7a797f9a6dff7e1c114b0da31a73df0a0cda2dc4590c5512d243f32dc90b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3057 Malicious code in @hongfangze/verify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d21967c00c2a461014b34e6cbbda87d6aaa78c3058709e4b02f3125db3da56dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...