Malicious code in vuepress-reading-time-extended (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bc2173cdec2761003cb14e94e23dc4759392b467f4f45b62ec5afd7c2353d96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-182 Malicious code in dotgov-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 474b190c86043a8da1444eb865e6a6214a6aed8aa0fd62aa37726ebc44850bd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dbx-js-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2191dabfd9180ad79d00f6678faee7b75417b6a5ee484798bff290a81fa0d56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atlaspack-transformer-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57a42ac4c0c8a380053e88934749771a5bf26c0619840538587e7934116cd8c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-233 Malicious code in prh-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a5e6bb05b0d252b543f928dda260a7af8cbc90e0e636614f789255b0cffb16b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in language-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1882f3ffeece596adb0e4f061ee9184155ff53076f3da549e77b9596eecfd152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in glia-widgets-ionic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0d5d3faebf1c86a5653722c3d88e893d95fb5e1eea9a5d81d4cf3a2dd82ebc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-202 Malicious code in lichess-org (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdb65e3664911d5ab4ab82caebca6255a38c6a150a4345389d6c934598101390 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-200 Malicious code in language-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1882f3ffeece596adb0e4f061ee9184155ff53076f3da549e77b9596eecfd152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-162 Malicious code in atlaspack-transformer-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57a42ac4c0c8a380053e88934749771a5bf26c0619840538587e7934116cd8c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in devopt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcf54c2d158de12c3d2d76b80c6977405217265d6e7da714233324d8cf8447ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vscode-tcf-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 081bab0ec2ee34f3590622d06dc898c469bd03a5919b3f05c6637e0744439f59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prh-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a5e6bb05b0d252b543f928dda260a7af8cbc90e0e636614f789255b0cffb16b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-256 Malicious code in vscode-tcf-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 081bab0ec2ee34f3590622d06dc898c469bd03a5919b3f05c6637e0744439f59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-183 Malicious code in emoji-datasource-google-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3653a56d9d36fb380b98090ef118578ceed822d7bb1ab1a62d6a18fba5ed5b2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-252 Malicious code in tinywallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceb242bf6d84b9aedbdd5b1b6e619f85fd63fbb2cdb08a6096eda7975ff49c82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylexjs-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b0810f5fe9534bb182c28c449a4ad5dc498cdb96461e00596f5b6933f2b67b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-loader-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c22e5d514334329c3b75f951d755b2a3ef9e122863f7c437530413cd6c49b986 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc49a758bac1d2b78a4c0e8880c22a12d4ee54f21af0e98829c17652f1ecaadb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in borsh-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51f002385b3c94048b1a161d8afd15fab61c24c5e54a4a23d9020a22313bd3f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...