MAL-2025-4552 Malicious code in ccv-token-manager (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ce8a53c46aaab673372ddfde017c10e1b84cbd5b342474448f9ab5e3a5a37d2 Any computer that has this package installed or running should be considered...

Malicious code in aspirejavascript-vite (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72a3fae658b3b58e8fd33d7e794a9a976ac6f5e8c1209d08099097b056b8cd6a Any computer that has this package installed or running should be considered...

Malicious code in nuget-trends (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e15d8438aa8bc3250a81a056153ed3922c2857a17e24e289a90822ae2362acfa Any computer that has this package installed or running should be considered...

MAL-2025-4573 Malicious code in nuget-trends (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e15d8438aa8bc3250a81a056153ed3922c2857a17e24e289a90822ae2362acfa Any computer that has this package installed or running should be considered...

MAL-2025-4580 Malicious code in style-value-parser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b01a73e3e81e6d1272878f4d16c5a569e2773f609a5fbf17dba53b3d56127963 Any computer that has this package installed or running should be considered...

Malicious code in style-value-parser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b01a73e3e81e6d1272878f4d16c5a569e2773f609a5fbf17dba53b3d56127963 Any computer that has this package installed or running should be considered...

Malicious code in reacts-gh (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f438d6df955eb639b0090cb670175f993ce6f6e5ce1f8d1926d236447864460 Any computer that has this package installed or running should be considered...

MAL-2025-4577 Malicious code in reacts-gh (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f438d6df955eb639b0090cb670175f993ce6f6e5ce1f8d1926d236447864460 Any computer that has this package installed or running should be considered...

Malicious code in gateway-v2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abe54b05ee1d5acceb6bc29fb2446737ebc56ffbe8b976e5e97b93794588ac8c Any computer that has this package installed or running should be considered...

Malicious code in prisma-clients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b3fdf58e70f2fc4164fb32fc018d7733a72f3596dbc80e34855240d2c3be548 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in winston-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c1ddd08c3507f29d71429f8b0ef2c9b946669f9eab8edfb1e739101e01e2bb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4447 Malicious code in prisma-clients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b3fdf58e70f2fc4164fb32fc018d7733a72f3596dbc80e34855240d2c3be548 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in winstons-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7ebc9796eae3ab4eb7380710ff205e061c750965207974c71dba9f0d8d2ae8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4460 Malicious code in winstons-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7ebc9796eae3ab4eb7380710ff205e061c750965207974c71dba9f0d8d2ae8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pushlabzy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b72cad9f6511e2786488a831c354d6e529f02319374d5dc97ccfd5efaa849aa4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iokit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0809d84edd6d3d9ba71ac05151f2564c41a8d94a6e8ee6b57d8237de7ba7720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4435 Malicious code in expo-firestore-upload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 265b76b510b5a24dcbc9d26be8211555349249589a6468e756c32680aebda977 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in expo-firestore-upload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 265b76b510b5a24dcbc9d26be8211555349249589a6468e756c32680aebda977 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logs-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 702e3497cd1d087860a5e171e17b44bba6ba6b7a62f38ff8a9d0e8fb2c8fc3fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4439 Malicious code in logs-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 702e3497cd1d087860a5e171e17b44bba6ba6b7a62f38ff8a9d0e8fb2c8fc3fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...