Malicious code in db-evo (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcfee85aff3b81b44dcc0c4c4fe99e193de46de665f2a0fe31221fcc6415c305 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @nexe/eslint-config (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28bbd639d7b6ddb2e3b98381bed2e182466ef9c99625b1e1c398cc37ee43f49a Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @art-ws/slf (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baf90d1c3b7ba54034d1d4c17018409a40ca9c0b81dce2f0cc612bf5e7358a44 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @hestjs/logger (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5b44b7c89eda3e220301eeba947231de0ad075f98e11343d2a169df9341a6ce Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @art-ws/config-eslint (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b89332826cb57152a8288941846a48e6ecb1d8d979bf641a288f740c34a0b99 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @hestjs/demo (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d07b84a8fad4cf98766b909452076e1349e19abe6fa8b41b3a2d3326650fb05 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @things-factory/attachment-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2fbc742d9dac7f03e5dbac839d5f3d41c70ac7040a8a34a0a7d8164066154b2 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47381 Malicious code in @art-ws/package-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83ba9ddbeaff9ca9f10da444f6eebc52dd7ffa99def6e187eab42dac24a4d7de Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47295 Malicious code in airpilot (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 846d44d22101abc0b31169c4961dd524b15c20769cbc74a19e2119c6db6e174a Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47396 Malicious code in capacitor-plugin-ihealth (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a74e8404cbb6bed0d720944cd8e6b06a310c8358bc3ce6065c60146610ff52e9 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47294 Malicious code in airchief (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d27bcc3bc35dd516704520eaafbd086947c4ca78d0f28945786da155acc1a73 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47392 Malicious code in @things-factory/shell (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ebd494f09184269de61b62501f8b32bfc56c353807f7e7356cecc35c5ab1346 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47332 Malicious code in ngx-ws (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95fb4f437cc6a86277edcd8e45410d2cab05e8d357ee942684097ef28c221977 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47241 Malicious code in @hestjs/demo (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d07b84a8fad4cf98766b909452076e1349e19abe6fa8b41b3a2d3326650fb05 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47254 Malicious code in @operato/data-grist (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a7038daac23a5335b1d13ffbcdc73d86e9f05d9fbd36e186c78bdad7aad669d Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47361 Malicious code in wdio-web-reporter (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab54ef5f776b95eb6610135fb736bcc77ce0ed9cc7ec79b805afe3498110fb84 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47340 Malicious code in printjs-rpk (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a285689b6f342d1a7b147b599c1ede8091b47dddc68bcf77c95aa38232acbb05 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47398 Malicious code in capacitorandroidpermissions (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4db1dacd688bba52c2c6768ed56310450482ba27cf25b23de8a664943712b40d Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @things-factory/integration-marketplace (npm)

Suspicious postinstall script executing bundle.js and YARA rule match on bundle.js suggests malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 707cb5e2a466e8a099c5ffaaf71fd576d658e67702737dd3dfef8dc62127aa8f Any computer that has this package...

Malicious code in @things-factory/email-base (npm)

Suspicious postinstall script executes bundle.js which contains code flagged by YARA rule unsignedbitwisemathexcess, indicating malware. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cdc3773013abc63a59090ab3b457bc1e047f7a294edd5f35e6ce43840fc0520 Any computer tha...