MAL-2025-2300 Malicious code in client-analytisc-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1413ae1456fe5f357befbd198d3c85b98e8d40e31b0d76c343d1cb6a9dfc9d95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2322 Malicious code in npm-testlist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 719312e2aaf577f4308c89250b75cd26b241aa1e8e15fa6f3eb9392d5a7a67d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2325 Malicious code in rc-upload-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8c8a04b14788b037fccbfd5f9be8c5f83d54da6321b13d213287d683a937baf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in googlepeay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49a49d099f1afc949e3c7a4c1985568353a3cbdddacf2f212072589d1582f851 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2302 Malicious code in codebarrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c801f0c455ad24f1a8ae960118a1bf1dab534b8279e3429ac736dd113fee639a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2333 Malicious code in stringify-bytes32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4369c15f1dad991e9ececa49c5f3944e2b59ae8c42fa6d11366c1bb8d723de69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chialisp-lsp-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeede289ccdfe7d4487e01b4eb54ed16a8666295df50031d9369d92f75d0d51e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cryptocom-ai-agent-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4b95f332dde178bf7e9fd99a6d8dd252a590ca10ecdb653ab105c5fe1e6b796 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in easeus.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eeac8284fa84b19966be2a1ba2e64a5fed1bfa544a303f110d3a230ccef69ae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ward-steward (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97a827b103b01a6bf01068abd3e9602f463700eb8f9e66c2cc6b051374d1f40f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ledger-node-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7407ff449f6702424fde06ca2cab289054c649439e98f9b863029a985e8cfcf7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2335 Malicious code in ward-steward (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97a827b103b01a6bf01068abd3e9602f463700eb8f9e66c2cc6b051374d1f40f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in core-registry-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84d80a92f4bc9e749a6e972e2ce5a00a5861906ac964b41440b6bc71194dbb65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in language-ring (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca7e9ac770686a75d1d581c790e326d66e60e71b9caa83f387a527c3d5e2df88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in expect-violations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d98ae6c06bd6b1cd2115956a382b7cdd4a1901560535df9f8284ef29cb6a4550 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2298 Malicious code in auth0-langgraph-state-rag-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4726a148bd39bb68771231f6ed71f2edab6932f2f9468e69b5f659528ebb6d4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in customer-identity-mfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4077d7dbb9f3ee9d04701dde8555a12f1b9437942c6e70540060d16e0288435 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in env-check-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04728a28db58b9a9e546a8840e5cca54ab1f7dcf20fbb0817639e0c738a3bc32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2256 Malicious code in env-check-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04728a28db58b9a9e546a8840e5cca54ab1f7dcf20fbb0817639e0c738a3bc32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2233 Malicious code in @shein-components-test-ump/text-to-speech-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a51a7cd403f53cbbc65d804830060941af889d9ec0f60acd449b59f89a081e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...