Malicious code in sellyourvault (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 518ca24019a3c703c70fb8800ce35feed2c847593fd170e47fad40e23b4e7b60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gacha-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d266c3cc45de6b63abc8c3898219a97982b9c5b400cc714f0cd62990fc0353c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4297 Malicious code in admin-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c5cfce31b518acf3e531f6865cbc2434b5eacf844f1a47c768fa6d30bb15fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in codeword (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aaf95d3c6934f346d9582d701dca64e259a66b0f2e42ed55c8c2b7096bf7af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in garena-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e17b9725323610c84d0eef5b07fd9caf89a9ee0ad67d94c35a07c61abdafbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kyutai-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eef195dd7dc3e7a30a2bbebaa32b71e36fd4e6a7ad2a7d67ee776953ca7faa3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bkeat-pytest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d2f35d5b97c478eafa7936e9bec8e276e048160fd82f2cb227e58d9870d107 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mshop2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b230b23967aac14c732f470e9bfd9d34d27bf592c1e3ca7150e827ef17cf5e91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4418 Malicious code in xlog-admin-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eb60334dd4f8546278e861e3dc7e4f69a46c5ed27bfe080fb6e77841fcbe4c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4349 Malicious code in gacha-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d266c3cc45de6b63abc8c3898219a97982b9c5b400cc714f0cd62990fc0353c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4350 Malicious code in garena-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e17b9725323610c84d0eef5b07fd9caf89a9ee0ad67d94c35a07c61abdafbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lcs-sistic-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b05382a541057365227516e05e0fe3aeec00d7087f6bfebae88ad20ac12209aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-window-rendering (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware befb1266ed27dcb7e09a8725163d0f8ca44b89e36ee02b3bc3bf904d312e230a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.cloud.common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46d26c76ae3c3c9d4f0975262f4b276f17bdaa1b436737ff8fa006f42576d8d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.multiplayer.tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c13b40d85fcab5bdfc69f73e935783405ed1d0304f221df3da1726462e86953 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dev.voltstro.unitywebbrowser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69add9c69f66a9fa7c5f3de6fa791fb0fe2f072260ad4786afe153bb26087943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4294 Malicious code in @elementor-editor-github-actions/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca0d018cb1686918115a926a22fcb726e9d6aac8d9d35e08948585ffa5e7a91f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @demoability/loadgen-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77bc624f36bdc284db27e9759ccf30fab22108a753042ccbd6a575fc26f90b79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.ml-agents (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfceda90642153626d064813e4c0c601ca81d18a6c5fd9e96855cbdee511db13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blog-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e572e251b32145d6856f8000dca0bbf112278ecc3f967ed61626010e0a0f9c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...