MAL-2025-197 Malicious code in jazz_token-authorizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3bd3fcfec7eb7354597369d7c1b2496841dbeabc3876ca1c150802f8bc3221f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-254 Malicious code in uber-direct-js-sdk-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30ee8294ed2bcf683f478b647f9919d6b45e0651905c29ada14a3ce392168447 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uber-direct-js-sdk-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30ee8294ed2bcf683f478b647f9919d6b45e0651905c29ada14a3ce392168447 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in snapon-imageviewer-lw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7053e8d93acd05ac2454f25c628ab30c641d481373e8f20a08b28a0f66e1fe38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in serve-static-corell (npm)

This package includes a post-install script that fetches JavaScript code from a remote server and executes it. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdac054c93284fd4c0dca285d57baabea075f4c42f7a8bd63abf69f974d56b31 Any computer that has this package install...

MAL-2025-130 Malicious code in karma-fest-preprocessor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12fc59d44987dfafc3d0226a2629d1aa8294664f22936a59406d8e77b6695b2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in venmo-ui (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c56cfa4b6e6b329cc9502a5eeea242d13fd03e156392465657d5254b441ecfe Any computer that has this package install...

Malicious code in hello-hamid-world-npm-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539c20029ec03b9e0b517324e4c69c8223fb3353722028788169d41256d1ef80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-127 Malicious code in hello-hamid-world-npm-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539c20029ec03b9e0b517324e4c69c8223fb3353722028788169d41256d1ef80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gouraud-lighting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfc362cce48bdb5f578a8b148d9c1883aa7b66c4613c09379816e9ab15ca89e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gfxapi-ls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 784bb96d93f59dcf39d71d7b4cc12349e74183b2f5557b86474e7f6ff17e6a11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-prototyping-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a14e26877ba590485f30ac33a914cfaa213c85de0503b2ff68bd4d9debc5e0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-102 Malicious code in testin-elengose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a31a1b1e6d6ea76e02eff8ae4d38d872484584bf0e6e734bb1cc26cdaeac6423 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testin-elengoseee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edaa630489b1be3fee657505445a398d51939cad9c6ed4535929d2a66889aa99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testin-elengose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a31a1b1e6d6ea76e02eff8ae4d38d872484584bf0e6e734bb1cc26cdaeac6423 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-104 Malicious code in testin-elengoseee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edaa630489b1be3fee657505445a398d51939cad9c6ed4535929d2a66889aa99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-105 Malicious code in turbiniactl-status (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc6838ef6d1c417a8e9148ecdf2b867dd4d49d6ffdfe1fc0f232917572a79d5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in turbiniactl-status (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc6838ef6d1c417a8e9148ecdf2b867dd4d49d6ffdfe1fc0f232917572a79d5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-90 Malicious code in gfxapi-ls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 784bb96d93f59dcf39d71d7b4cc12349e74183b2f5557b86474e7f6ff17e6a11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testin-elengosee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec5deac0188f700e1537b6812c80b7dafdc502d35714eb1c32cc371115dfeb67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...