MAL-2025-5748 Malicious code in @nomicsfoundation/web3-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8be3c236328576fc8bb353a6101fbbf35e483b67f019623f8d2f7538898b568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5746 Malicious code in @nomicsfoundation/sdk-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dd2aa93af5e60cc32d01700108f493d86a9f886cc6a62fb60b06ce088a605e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in win-utils-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99d55e34bfdccef418c3d9a32fed525e724c57d61a1128d9924506b8b25200e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jwoiesk11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8272ab239b8e1ffc477bd4ffb90538ddeb7d1cd11f6bba6b8ee8a396aeafdb61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5749 Malicious code in homiersla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18b688a5a2d22b21d1e643d311c8364a0d6d26d28c537c6e4fbf1a00f7dc12ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5751 Malicious code in jwoiesk11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8272ab239b8e1ffc477bd4ffb90538ddeb7d1cd11f6bba6b8ee8a396aeafdb61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5750 Malicious code in houimlogs22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c17d30387b6d0c43cbc6b39b5be60746ceb7ef2a5a6f82469ef4f40f7e46f0c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in netnodepushlab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8075dc70312aef2a7a748bce4eb98bff84e4f8cc1d9c992f14446a257cf8e319 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-iot-sitewise-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97ddf55083335c582abfc892f9b5d93c8b5ee5232f0fa07ae4da45dd8eadc84b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-json-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0df63e5033b70f866f957f8443b533f09684b459897700f9ed44542d23b8fe82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oneapi-environment-configurator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b59cc2d584cc83aeb72d1b1e463e2f4423a81b86d2fa4b7a2bdcf7867bba348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aspnetcore-reacy-sample-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e2b1e88eb171b5da54b5badc189d571ad6cfde7115103930a103f15f067c398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dry-rb.org (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cb554feb840a59c833bbd10911c129dbe4c18f03c9c6f70097517c20349f3b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oneapi-gdb-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6826b05948f6984052fc37700b503547ecb425474cd1e56c4b03926b8e2ffe4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zigbee2mqtt.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e185d275e7942dc0c0abd3cbf5b1cba185b969d6d54054fb427fa26369283774 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5737 Malicious code in vscode-oneapi-environment-configurator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8b4992dcea3340ef6012db58cede2756b194c824f67c49b3ebae3b30a9b946c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5670 Malicious code in bankersbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b58330b4e53f3d1ec772627abe8ab65d077ab40fa89bd51741ebf8ec708f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5693 Malicious code in frontend-release-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c7b669533af76df1c26a09f15c4e4251d5ebc14cfaceae8a7af9dacbe4f8741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pogomap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 346daf8a2d0c74a0583577fb5a7a813715159cc2783cee412ed8064813f0f20b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in soundcast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 379b1dd8b190afa55771e449b6c9e079ab30456e18816ffc30f20d8252a07932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...