Malicious code in zqdl5553 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1cf60e26e47d2d6d26e57b229d284d880dd0529382d47d9a07581ca6faeb3a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-116 Malicious code in zqdl55513 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a623c3e69f707a5c5284a6e298d4d5149c282064e65985928f1277cd258d87d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-115 Malicious code in zqdl55512 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b40b6aca34ba0026d6cf9dad59b5813350453a235dd0b90b75e9651031e6c53f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-117 Malicious code in zqdl555147 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 693d5fb68a0482e2a08e2c899197a6285de97aedbe87242e1201f898db550685 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prettier-s (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a842b20c0aace9294c3d0326e85547c5bdf27e25347c8d744845f95f8d1374 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-97 Malicious code in prettier-s (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a842b20c0aace9294c3d0326e85547c5bdf27e25347c8d744845f95f8d1374 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in build-stuff (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b7ff7f3b5a1ee73432fc3f1ace509ffe1fcb48099ecca9aa87e0396fab2a7f8 Any computer that has this package install...

MAL-2025-39 Malicious code in dexscreener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 294308d3c6b462aa1ed7e43894f66f1fefe347cc188fd9a360649f1c03b0fffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-transaction-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 786862cc5bb54e2a1b9307f03e4cd67b11a7325ba9c251b3695b08d8e3383c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-stable-web-huks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29a7ad6d118f0ba506b171848b1e56b31b09fd44131fc96a3d14f41a323a5812 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41 Malicious code in solana-transaction-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 786862cc5bb54e2a1b9307f03e4cd67b11a7325ba9c251b3695b08d8e3383c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-dotenv (npm)

The package contains code to exfiltrate environment variables to an attacker-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3339a5b064b412e57a50444acb2bd685d7e5e7684e6d9ceaa0f1c31ff1f97454 Any computer that has this package installed or running...

Malicious code in alchemy-web3-webpack-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0baf7db6925882a96eddaa00b4877f9147183d9b00a85fd69b02e5fe625f7ff7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in electron-builder-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bba9892079dc9a4656f9576903aa20e7d320e80d687cffb7b05a31f1cff127b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in walletcore-gen (npm)

The package contains several malicious PowerShell and VBS scripts used to harvest browser data, take screenshots, log keystrokes, and establish startup persistence. It also bundles a password stealer and exfiltrates stolen data via Slack and Discord webhooks. --- -= Per source details. Do not edi...

Malicious code in tt4b (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 566cb941a2928e1680d09217c711e1a56aa24333a874bd07cff988cfa17e31eb Any computer that has this package install...

Malicious code in appboy-web-sdk-v2 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0c15da90dc72a0bf53f2dccb6e0419535a29d50e59fb3de4b5fb7a2f72245ea Any computer that has this package install...

Malicious code in webinarwebhookapp (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88bed070500ab5e1c676af51f01907117803edeb731a3f97079c35ff3ff1f354 Any computer that has this package install...

Malicious code in lambda-demo (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70fa7a653e95d7b948968c1605f557ae4f569e78a26d160f8768a44bca1b6f5b Any computer that has this package install...

Malicious code in player-workshop (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2f2abed0d43ff0cb4723fad6e2c44fe25c5a9923cc44294ec1b199b4479d298 Any computer that has this package install...