MAL-2025-3998 Malicious code in ing-feat-external-agreement (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2329b692bdff4fb0a80e073bf9135f76620bf6899928d599311fe4f1e9adb7b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3980 Malicious code in affirmv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37426adb6b2eb639d44506bcc9b739c4ffb2c7b93c57139aa1757972f6cff5a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopify-variants (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 064c762261c80ca73923dabe79bfbe291b06b3b62cf25226ae5688463f6d413c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in affirmv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37426adb6b2eb639d44506bcc9b739c4ffb2c7b93c57139aa1757972f6cff5a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wal-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31f1190c63c1f6bf955ab1d1638b199634786321614c27c73a56718a80770295 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in valdatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68f4565e0cc0a62335e888be0acb41be1c47165a7d0a4e1482a34715864deea3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postcss-optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1b21cb8bf9e07771bf78b04cf38a9b73e69aa559368217b2c01896e9fd46037 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cashcowprotocol/keccak-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 169f38ea23bfdcebc0c858d32850cca112ca4aca633aae7914cd4ff6ff6b363d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3988 Malicious code in dahsjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30580a69445d1f4395adb933d748209606b66d49a7886f3950130732dfde5ece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dahsjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30580a69445d1f4395adb933d748209606b66d49a7886f3950130732dfde5ece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dasjhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90eb199686c875a0d5912d7e7704ac6722aae5e383dfda1a22b0811b82d7015c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nestjs-translator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0ceb5fa1318b74c2003c389bed9724f792a9755ee095548718c1aaead2bbaaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fanotify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bad587097321dd0862dbb332c1103171c68338080d4f4a935afd9ed80f56ba3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reactbootstraps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ffea1afeca97a0980bcef8e1bae971fce5f73b099c0f7c5710f1c08d0293988 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4015 Malicious code in reactbootstraps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ffea1afeca97a0980bcef8e1bae971fce5f73b099c0f7c5710f1c08d0293988 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stencil-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63d683888e04619d454cbecb6bbbf03259919fb7cb2a3ac164deb94fd37938d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logdna-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5e677b0469d410d4bebb15cebcba6f551b7f4dd27c9b05e9e3162d6abf87f56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in img_sharp_wasm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23ab3e6f8ad3c5a6aace4e1f0719242cff714e6294b9f83cc1c950868fc2d509 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in say-hello-npm-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e0eac5e92f8a98fe25febcb3c44e78e8b816e619470dbb45f8276cb67cdac7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arduino-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d38c56c0dc9db93761b7dd740096864d883277825e27bba160aa0734be2c6b30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...