MAL-2025-2281 Malicious code in simple-progress-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b0b2ded38b63b01027590e0a217718f8b204d46705ecbb37c8d33733ffa1177 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2283 Malicious code in upload-aliyun-oss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b137056ce2896ba2e4b0b632262308afc40672c5a46bff9c2cb50a7b3a81a386 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2262 Malicious code in json-schema-verify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2806afc266e5a393fae137cdfc3b662c6185c8a15e38486f79a22f6962cd0ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2233 Malicious code in @shein-components-test-ump/text-to-speech-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a51a7cd403f53cbbc65d804830060941af889d9ec0f60acd449b59f89a081e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in data-ext-extra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da42338e541d2556618253303cbf11b710a062fa58a2dc476baca9aaf8234cbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2251 Malicious code in data-ext-extra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da42338e541d2556618253303cbf11b710a062fa58a2dc476baca9aaf8234cbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in better_dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4526960d827ae5486d65de8383708d021ba89326b548041564c96bc0aeb9f835 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2243 Malicious code in better_dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4526960d827ae5486d65de8383708d021ba89326b548041564c96bc0aeb9f835 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodes-tree-visualizer-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2268ec6364a3c145eaefc143677f3caf0d603a4fb921c9d8ed782d3133687a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2269 Malicious code in nodes-tree-visualizer-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2268ec6364a3c145eaefc143677f3caf0d603a4fb921c9d8ed782d3133687a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2244 Malicious code in bg-todomvc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 696ae99c8156c842d3cee4e72ef34b362471b393a7e23460d085383212d1f200 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2258 Malicious code in gh-node-module-generatebom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a04173cc21773450d4bd86768588db1893acb72fbc0336681a1370f3c7e8e781 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in retool-quickopen-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042613c8964cff510d8e7c399f8af5d2d64e787d61c331e0e3104ff349147412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2277 Malicious code in retool-quickopen-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042613c8964cff510d8e7c399f8af5d2d64e787d61c331e0e3104ff349147412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2287 Malicious code in www-discoveryeducation-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b81d0d31dd0c1ad59b382392dd3309ca9d6ca9ccafde5ab54ee3c7a4c38fb20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in valentinesgiftt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c3e9e88211b3e2b0dfd9993c04491f26b66cdaece41f1d39f419686829270fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rexz-nsfw-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f31922f88308b517c097c8e5d128be0f383ac6cb28abd2143e7dd9f6f21b0af3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rexz-imagine-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a5880974c43ddaa1e24f3eecce7e9eb1e66d31adb347a095436a27316c30097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2278 Malicious code in rexz-imagine-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a5880974c43ddaa1e24f3eecce7e9eb1e66d31adb347a095436a27316c30097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in linear-zapier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3d3c3abe155e205917bb76c52f6e75b2812b2ff091715a891e29e6dac4b4628 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...