MAL-2025-5885 Malicious code in ado-codespaces-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acd2e4a00a6fa99e47e9f10ae7238f2faaf2dd65d07678a4f33037a25ef636c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5945 Malicious code in okta-ui-private-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9cde1163c4cd1320ef67a954307e5ac2fdf19ea7925c9b0cd032910b171e6e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in okta-ui-private-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9cde1163c4cd1320ef67a954307e5ac2fdf19ea7925c9b0cd032910b171e6e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in appcenter-sampleapp-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8015d357cb8b89fe98c7076abd8ca3ea3146d43990de4f2410c5e2627a2fe970 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iron-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2759ad6f6329e6837cebf29c50582adcc402d3ad085598b405b7005047b4d9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ado-codespaces-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acd2e4a00a6fa99e47e9f10ae7238f2faaf2dd65d07678a4f33037a25ef636c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5957 Malicious code in square-crypto-utils-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c2a693727e119b7e668536dcb77730f98ba80f9bcc2b03f5bbc80f53fea74d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @subsplash/auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 689eb4db6c52e3ce55d130f22da039b110c816b7a03395db966a87086272fd42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in symphony-cryptolib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8216b9fdde76a4f40936fd19fbe9a3a7d73dcf66ffdde04c6cf54ee965448b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @didi-pebble/pblint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb1531e6163d25b10b0a50538ba7b2462eea1da3199b5163aa90b8f5e4882e4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ltiditest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7d35f88e1e543875b9c6d67fea78b94b8d0b46dcbf2b73deef02424309a6275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gmgn/app-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84805b96dd0a60155a6fa059a708837254facd211be9d7b614fae3a5fdeffa70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sfdc-ogs/v1-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf5cb65e88f9911d818fe4538c2454d53d9f0bac558bc6bd8bb2f8f8146d2ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cbre-internal/mapping-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eff43200220833028b414d72d609d46c1bf24b68f38bee948abf760729d76e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @segmentation/gf2fov (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cca9c2565b19f690b835370484ad318ef144e452a6bd93f7fb9461803f3b5cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5850 Malicious code in @cbre-internal/mapping-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eff43200220833028b414d72d609d46c1bf24b68f38bee948abf760729d76e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aspnet-asset-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 068ec09bafae1223e1ebcc83c97b674b7188dd9ca13b5b73d241bccad793bf88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5861 Malicious code in aspnet-asset-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 068ec09bafae1223e1ebcc83c97b674b7188dd9ca13b5b73d241bccad793bf88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ultraconvert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e05cf9459694fac15785e7fdcb157daa4fe5d8a7026e9f6e67ba6873a0ec3ad5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5865 Malicious code in ultraconvert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e05cf9459694fac15785e7fdcb157daa4fe5d8a7026e9f6e67ba6873a0ec3ad5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...