MAL-2025-5673 Malicious code in ca-ui-carbon-toolkit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7fe942358c29b14aaa3755810e04ffe2cd696331434ed03a940060449bb9d05 Any computer that has this package installed or running should be considered...

Malicious code in baglass (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 913b103a92c5fcd2b5407e2a094f43906f9c214bda154709f691ba0bc2f263e4 Any computer that has this package installed or running should be considered...

MAL-2025-5669 Malicious code in baglass (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 913b103a92c5fcd2b5407e2a094f43906f9c214bda154709f691ba0bc2f263e4 Any computer that has this package installed or running should be considered...

MAL-2025-5674 Malicious code in caglass (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e455bdcd125bc7e808bd44aefba85c1ef5838aa36b61d5fd75f2c6f026bce1b4 Any computer that has this package installed or running should be considered...

MAL-2025-5596 Malicious code in @etech-flex-sre/ls-loading-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 487c2e88510b861b61f2ca278f6341fe808b6113fc956f64320585b8e83ca3a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in libramat283 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2f0212ab46c6a0d5aabae8395896759602aea50351eb964e8292a154034fbd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5599 Malicious code in libramat283 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2f0212ab46c6a0d5aabae8395896759602aea50351eb964e8292a154034fbd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5607 Malicious code in nodemantle002 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5fcaba762cf2b6247893e84f01eed5b252de14a42d8a27d4a30178269e82242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in n8n-nodes-zalo-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 379a02b176ecc66ef836895fbf96c21266700d1f518bf8116f1747cf8601ead0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in n8n-nodes-zalo-vts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fde0db4909194d627bc8646a788c5ba6d8decf0fc37ee2ca5100a8560e85ced1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in n8n-nodes-zalo-tools-vts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2329810f2a1823ea41018ebaecc3088d17c44d6b40443b63ba8cf17463f898a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pricing-simulator-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5c1139ad289202a8351450be1d1d9c57ca94946b8d066fbee4fa70796cc7853 Any computer that has this package installed or running should be considered...

MAL-2025-5614 Malicious code in definitelytyped-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f91b19bab731bcc203061fb348e461a3142e7c987549dac0d31e0b868a6a8027 Any computer that has this package installed or running should be considered...

Malicious code in lz-evm-protocol-v2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9092435adf11e0d58f4c9c097e35aa04b9d5f234eab6b33f20ceebbd98701446 Any computer that has this package installed or running should be considered...

MAL-2025-5732 Malicious code in systemjs-builder-test (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de897090e555c8fe1834e43ec617a470a724ab1c0ffbf171899e4d839b3bbb07 Any computer that has this package installed or running should be considered...

Malicious code in rjs-test (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff96ebaa9a7e9bad85ca95367b0a36f1c3374ba9f80ce3fc5aac0a53671cb5e7 Any computer that has this package installed or running should be considered...

Malicious code in @emersonecologics/emerson-angular-trove (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c229693a6cfa1c30c9c957144ab93c804e134a54c587ad75b4e2eb860d89b778 Any computer that has this package installed or running should be considered...

MAL-2025-5593 Malicious code in @emersonecologics/emerson-angular-trove (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c229693a6cfa1c30c9c957144ab93c804e134a54c587ad75b4e2eb860d89b778 Any computer that has this package installed or running should be considered...

Malicious code in stencil-module-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7b81d9bc05cb0363e0a13a4f3ec52001cae4fcb470f11f0973d186fa47271b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5592 Malicious code in comcastapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31612a7938787ffe91079ad30056051f31a068066752a935bc2123267f409730 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...