MAL-2025-5384 Malicious code in cooo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware beaa040ccddb48af03323505f3ffb736d08b18d3fd03a39d535bb079cf6ee430 Any computer that has this package installed or running should be considered...

Malicious code in themeone-animate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e147615a6d4e51665cb5f31f094f28cbb4c79a9c3ea92899c8a0a37ea40bb4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in r6-info.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5776f3141e453fa085c2ea81f617610e3243fa733cbd8f54d01864a57e54247 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dtable-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4325bcefb1ef8dd7bf39cc694fc039f034e9a3811c8af4e36099a9d2bb375318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fb-error-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7df1010f67c9aa7b88340ac8b1041d477068c17370f2d9eaa865a75e3e21deb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gkx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce62db6be2839a6d59876c849c75c5afc4237dd364e8caf60e99c5c1a00f7c9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hero-tracing-placeholder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a3db765a0902f942989f3de02a4827acfff9c0c758c2feb9160b97fb2f6a921 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-location-suggester (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2737604ff441534b7aeae22ee55636471142cccc2d6e2bbd4895a8f640c30aa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-forget-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a394c45b21ba1a2437ef3331b2c18fb40316d9276a55529d77c29c8f729174be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5499 Malicious code in gkx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce62db6be2839a6d59876c849c75c5afc4237dd364e8caf60e99c5c1a00f7c9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dm-cloak-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbc446510f88cacca6d96ebc43436a2e388738c2bc236f8a356f4c11d25600e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloak-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d81546f41c53f13a46b7c372cd2ac89b76c664542fb9b1652357cde5323830f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in icinga (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 624b17931789ef2a75976d64c2bca71890379a263f31df3d791a382040023d4b Any computer that has this package installed or running should be considered...

Malicious code in paysafe-wac-web-2fa-lib-fe (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc4a675838bd55e44681b2e5ad02794afe78cc93c4f58f0cf8efeb5acb19cc87 Any computer that has this package installed or running should be considered...

Malicious code in node-orm-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 865f8ea25ee366ddf039c3cc4048e0974b55b5cfda34aaf8679f705a5ebc5432 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in keythereum-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e190a6b75c720484c00bc747f1ea989c80b20733327b6a0ff26d29538aa471f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-svg-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d1b4540b7accc26da839119cb9cee8be93e168c74f00d68eb96e60241796fbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5517 Malicious code in react-svg-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d1b4540b7accc26da839119cb9cee8be93e168c74f00d68eb96e60241796fbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zaranian (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc245b6b3bfbfe10a327a3d1c888f3fef4d60c69bca43b6c9653c124d9aee1ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5531 Malicious code in zaranian (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc245b6b3bfbfe10a327a3d1c888f3fef4d60c69bca43b6c9653c124d9aee1ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...