MAL-2025-3053 Malicious code in @hongfangze/random (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fa0305129280dcc792459235adfdc6136839cc43305dea19709f4970e9edc56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2683 Malicious code in loglo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c644d48e0fecc2efac60d1def8ed1015b9c0bdc932f0bd6d8bdd462b67c0aa3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ofjaaah-dependency-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69d28e1655217e54d687a03a3c6b7d2f1bf2e5098277d42ab0072f39885269bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2538 Malicious code in wokes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2eee287f83d820b42e0fa26940bfd28705171640064c0a0b3bce48859675fb96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2407 Malicious code in redux-debounce-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aca08bddcbc410d19f5cc85276c487b26f76e578993be572baf88e57b23ed48c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chialisp-lsp-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeede289ccdfe7d4487e01b4eb54ed16a8666295df50031d9369d92f75d0d51e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2185 Malicious code in node-unzip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd99263d19f7c6599d64abff02934e9d436d39de9b4b3c4f1d3984ccb85956f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2198 Malicious code in vscode-ps1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89a6b0c5359c6999b0721fc722f11353dd05b6e52a6795c5da8174e0a353fa54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1638 Malicious code in unpnotifyserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae8dc59eb2d9dac2d74fc1c76d26bee3a61d3a8519b9d61195455646c024585b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1446 Malicious code in weex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3463fb43413f5f55fea549cc0240a5b8e3726099081d9d9379f10c772591d870 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1406 Malicious code in coinw-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fa00c723741623254392df4efea8cb1992992ec41b9cbd448a7d3b478759cb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-213 Malicious code in okta-help (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3702e75fbf633b5ad6e1b0dd9aa6eea3283728f7bd3ba1d7bf9109750dab2df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-86 Malicious code in efergvthdaadgfhrgewsfqwf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 894602cb30d010a59a8a636fbe8301d38272737acaab1eac0ccd85996644fe8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-118 Malicious code in zqdl55516 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2a336fa23aa2b0c5e683c34c2273bc1e583be062a3d0100ca08d99ef9214601 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cokie-secret (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bf6e44e11cb2ca8f7463f86029c79bfca1f5b6f1e333073ef26716d12f86a3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12014 Malicious code in oj-odcs-fontawesome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 305cca77ffd82127e64a3a925db786f7045fdb77cfcbdb5d968a8a785164e69b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in qassam22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 702b000366b6c97d193893113b38978d35d7a5805d79623701fa92a7b4d54d68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pmto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cab6d5c183f9d9ae1caa6a140cfe73761fe0db12d3067e9e393fdfc86f89b1a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in duckc2-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ccae9bda706300a8078341f64a00c3eeb0dc539eb2d138274eb7b41487169a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8959 Malicious code in local-node-rig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c27eabc498de725ddfd8be17bff9aec9e4dacaef2050fde05ab89943a28a115 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...