MAL-2025-47930 Malicious code in my-ttt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e183b31e3dfa7feb3d5dcb77d854dc97a37725947d01080753df10123c5ece3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-tsconfig-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 867785f3a2ce4c75f70bdfe547c34b8c96ae89125ef2ee3b37835f5b752c36c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47925 Malicious code in file-uploading-advance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a24a99ddaa80c4d726f189f11309cdab74b4343f1e567ec3c5fd01fcd9832b3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47934 Malicious code in vite-tsconfig-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 867785f3a2ce4c75f70bdfe547c34b8c96ae89125ef2ee3b37835f5b752c36c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in file-uploading-advance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a24a99ddaa80c4d726f189f11309cdab74b4343f1e567ec3c5fd01fcd9832b3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mcp-server-fixthis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4109cd9a0c196b277a25ff70ae8b8a81ee61aaac82c1d77bbb4e743496508e03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ocp-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7840fa3e2dfbea07d71767142edd939d438d07277cae8abc8dc00a497b3254f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dotevn/config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd413fbd590c7cda815f04e1334a602b11a45675da1dc8584e3ba025676c0532 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hex-validator/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25655f70d79110f8ebcab9a8760766907a283e49147ebd961e97b0009418cc1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dotevn/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b95b9f994dbbf3a9562b73fb2a0445eb341e9e8defdf89f43a90a3398270759d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47914 Malicious code in @dotevn/config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd413fbd590c7cda815f04e1334a602b11a45675da1dc8584e3ba025676c0532 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hash-validator/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be7ccca438d061fd1d98fb1061421f517bccb37ba164e017caf7b8f8db366e2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47917 Malicious code in @hex-validator/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25655f70d79110f8ebcab9a8760766907a283e49147ebd961e97b0009418cc1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47915 Malicious code in @dotevn/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b95b9f994dbbf3a9562b73fb2a0445eb341e9e8defdf89f43a90a3398270759d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bs58-utils/wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c802bc1898c7a60b65bc2c2b2ce4d2c52bb29a73f0b93faa7c4e6e60998d32cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47918 Malicious code in @prompt-sync/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f492139591d0edfd6e53adcf9ccf22ee8ef41d709bd21fd904acb9c9f66f59ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-chunk-chop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0a281ba5e607e5e0a1ec33d95c6f94c54c8b9e04bb37df988126453585d7a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47933 Malicious code in vite-plugin-chunk-chop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0a281ba5e607e5e0a1ec33d95c6f94c54c8b9e04bb37df988126453585d7a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kecacapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9708d0d602f61799571f28e3206743afdc12aa74044857fe2a74d3755668f44e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47922 Malicious code in cryptodotjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1cfa09b618dc51e1ed65556120fb823276eaaaa7a3e75a2c684da978cd11842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...