Malicious code in dojo_2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9977fa53d221008b563ff81ff89bc1ebaba9b5b258a2845a3a2aa1dfbe0f302 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in growthbook-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c737e188f198e2f774debc152e35106477be618741ecc8afc62df2b72b9d0323 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1244 Malicious code in etsy.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1fb9f5d727a671b0737c22729a92ad2c27b39f8dff89f17f5188dc58134b805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in etsy.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1fb9f5d727a671b0737c22729a92ad2c27b39f8dff89f17f5188dc58134b805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1246 Malicious code in growthbook-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c737e188f198e2f774debc152e35106477be618741ecc8afc62df2b72b9d0323 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v331 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7396dc02a5405a71efdc0e63b0eaca22d4ba3161189c8366d3bb835fc7a18b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1249 Malicious code in internallib_v331 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7396dc02a5405a71efdc0e63b0eaca22d4ba3161189c8366d3bb835fc7a18b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v666 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9638a514e7e2d6283a828ccb3fb9513c6ff53de16da5291b024f5465fff3c788 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1258 Malicious code in react-scripts-win (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29e804e3b477f180aba3ed9674d889a1e235e2091cca2fd2fe31cd5ef7528978 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1259 Malicious code in slack-azure-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bd85e2ed9b4c56dd6a97f9bec08d80ee181b173bd49ba7f8bd4ea9bdbd421db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slack-azure-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bd85e2ed9b4c56dd6a97f9bec08d80ee181b173bd49ba7f8bd4ea9bdbd421db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in libhash-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b2e27ca6bff082d9645b924364c7f5bba8fbfa574d7f60ffe823a7c52cda079 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bookingcom-admin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9d072477020f7c118d12abd0f6a95b217ba0f4b34a64fd4b527722d51c87cef Any computer that has this package installed or running should be considered...

Malicious code in apple-tests (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ff93f95d8e6235296a34bf00a2cf834bcb64673a71326fba527454a5edaf89 Any computer that has this package installed or running should be considered...

Malicious code in guests (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90c450f222886a91d7c733fcfbdf4a4b5104c0b4a1d1931f79e0bea1201f1398 Any computer that has this package installed or running should be considered...

Malicious code in html-webpack-plugin-v5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ed88e44f9e2966208907dcc8fd1b170e683aa017e8a706289a5bd2134e60f37 Any computer that has this package installed or running should be considered...

Malicious code in roro2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8182d2b109432a3af3949760f0339502685090cd2b138efdcf7e7246c17084e Any computer that has this package installed or running should be considered...

Malicious code in apple-sync (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0c8a2862682c8b22d925c82e7abc361ea6cb147190926513d7f7c09af233899 Any computer that has this package installed or running should be considered...

Malicious code in digitalexp-microfrontends-framework (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ca94db6587b92069f32a0574951f800a7cf2789f0ca5ad3dce95bcb122e205 Any computer that has this package installed or running should be considered...

Malicious code in apple-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4113cf662e414936dfc540b2ebc7c134b8d83e46635daadf59a0105f86c70feb Any computer that has this package installed or running should be considered...