MAL-2025-3899 Malicious code in jb-sol-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e07a37ee37ad01b1e0d3674307dda8f293b0152cd93544305a2bdce1340c6035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-crypto-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d77d3f937a0c6f4071e5688241c3222eeb62c0033c93c981570e554400b14d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-crypto-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb0ae4278aeded272c00f7218890bedf1e2e9dc77d03348eb4a1afe7fa277e83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3908 Malicious code in node-crypto-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d77d3f937a0c6f4071e5688241c3222eeb62c0033c93c981570e554400b14d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3917 Malicious code in solana-crypto-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb0ae4278aeded272c00f7218890bedf1e2e9dc77d03348eb4a1afe7fa277e83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @okdev/boiler_plate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03430707bf9707317455858dacbbd05a07b53ddf958d87ce767b27067864b864 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in compensation-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddf28334129095b5b6e45372c4624f6813fe73958398e24474dc3a1c0e1d18d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3947 Malicious code in cp-area-nao-correntista-fgts-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8095eb5ae7705ce9b30c64714683d8be1cf363c3775707e2900c35ac10eb4a86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ctalking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b0bd0f0689ac862a7c01e77498ff68470544cf1aa43dc3b59172ac04896d10b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lodashing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bc06ac67ed3a5e36a05578a4914e72c57833d27babdad196f17a54c1ebea3bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in momenter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f430e51962da7f325413ad52b7f901ca944587f76401dcc9b3d30f6ab15f5d0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in symphony-binary-confusion-matrix (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61ffb1d10faf9a2d8bc7c3f55a5c7146e5a6833835949292e731ba365a15aacd Any computer that has this package installed or running should be considered...

MAL-2025-3972 Malicious code in symphony-binary-confusion-matrix (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61ffb1d10faf9a2d8bc7c3f55a5c7146e5a6833835949292e731ba365a15aacd Any computer that has this package installed or running should be considered...

Malicious code in valida-bepass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a800b30f2110accfe121855b537578c4a8155e993dcb5547017d34352fdc1c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3859 Malicious code in valida-bepass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a800b30f2110accfe121855b537578c4a8155e993dcb5547017d34352fdc1c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in att-bit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c60087067856675af280cf9525ccb222374a8ecb4467310fa46160b79ea4a5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lululemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b30dac91622fe4bf2b0b8efae85c2746a4bc8c4dc848d9ababf9fd31582dd9dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pcln-popver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 206369b24afc9df430dc47b2d41276f40aefa542db8d9edc65179445e8cb99be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-int (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d314fd1e5fe72ac326ff48b35eeea0675329a3035ad79569701b5e2b27c4e198 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rushstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b991f4891d1df3ceec8938fb7ae61d26651d75afce6f8b5b8317d7532e64b9be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...