Malicious code in dashboard-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d421eea33f3a5072db15cff1f0c190af64dc4e7d8963bb2eb8a32d6ac855945d Any computer that has this package installed or running should be considered...

Malicious code in oneapi-environment-configurator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b59cc2d584cc83aeb72d1b1e463e2f4423a81b86d2fa4b7a2bdcf7867bba348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-json-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0df63e5033b70f866f957f8443b533f09684b459897700f9ed44542d23b8fe82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-iot-sitewise-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97ddf55083335c582abfc892f9b5d93c8b5ee5232f0fa07ae4da45dd8eadc84b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5713 Malicious code in oneapi-environment-configurator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b59cc2d584cc83aeb72d1b1e463e2f4423a81b86d2fa4b7a2bdcf7867bba348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-iot-twinmaker-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7f0ee041fd32ff1222732d276760eea9a8547107ad0492a0654088ddfb85381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oneapi-gdb-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6826b05948f6984052fc37700b503547ecb425474cd1e56c4b03926b8e2ffe4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bankersbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b58330b4e53f3d1ec772627abe8ab65d077ab40fa89bd51741ebf8ec708f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontend-release-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c7b669533af76df1c26a09f15c4e4251d5ebc14cfaceae8a7af9dacbe4f8741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5670 Malicious code in bankersbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b58330b4e53f3d1ec772627abe8ab65d077ab40fa89bd51741ebf8ec708f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dry-rb.org (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cb554feb840a59c833bbd10911c129dbe4c18f03c9c6f70097517c20349f3b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5693 Malicious code in frontend-release-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c7b669533af76df1c26a09f15c4e4251d5ebc14cfaceae8a7af9dacbe4f8741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aspnetcore-reacy-sample-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e2b1e88eb171b5da54b5badc189d571ad6cfde7115103930a103f15f067c398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zigbee2mqtt.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e185d275e7942dc0c0abd3cbf5b1cba185b969d6d54054fb427fa26369283774 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5737 Malicious code in vscode-oneapi-environment-configurator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8b4992dcea3340ef6012db58cede2756b194c824f67c49b3ebae3b30a9b946c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in soundcast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 379b1dd8b190afa55771e449b6c9e079ab30456e18816ffc30f20d8252a07932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mulle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15589f9b2ebb828fe096efdaeef76974f774119ab4db373e4d9d5735399909f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pogomap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 346daf8a2d0c74a0583577fb5a7a813715159cc2783cee412ed8064813f0f20b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5683 Malicious code in css-keylogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d7d5c0eac76577da5186e985efd72018e773d9ada891e44852188b9e5cd8632 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in css-keylogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d7d5c0eac76577da5186e985efd72018e773d9ada891e44852188b9e5cd8632 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...