MAL-2025-5659 Malicious code in @bosch-iot-console/monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ed0c2752e241bc41c444130570ce1cc9bfd7162c795da9e4d17b0bc2449c48c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bosch-iot-console/rollouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a7c59a1a8e53130cfd7701d08a305d5e478e43a2a5b39f57258f504069f050 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bosch-iot-console/monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ed0c2752e241bc41c444130570ce1cc9bfd7162c795da9e4d17b0bc2449c48c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-tsauditlog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 830e528439887027d65ed0697132b3f91dc2b11e553dc12671446d5f6eea1b2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonskipy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 825aeade17635320d2922155fc8e36ab7810c8cd83aa62a8521613534dc52e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5703 Malicious code in jsonskipy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 825aeade17635320d2922155fc8e36ab7810c8cd83aa62a8521613534dc52e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in io.ox (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f943d7e85ce7b15cc0e8fa0f234c36503767f627e103ac8062d96f57504efbe4 Any computer that has this package installed or running should be considered...

Malicious code in zplex (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ad25f43dff85fb90079f71e1416944834a6e7244faf6a1c75aa20fe17661db3 Any computer that has this package installed or running should be considered...

Malicious code in pbr-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4933f0eae305db421cd46414b1773fb97338c6966af0abd06e1232ffe4c4c96f Any computer that has this package installed or running should be considered...

Malicious code in htmlbars-inline-precompile (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c4a212f0a71820f5e5ac4def1449d454a87b95082eae0de676cc3e27006831a Any computer that has this package installed or running should be considered...

MAL-2025-5649 Malicious code in @subdashboard/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9e3ee4d3e2596c958c832ed9062f00d7b03289fa32f9f3a5aacaf2a4974f47e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @subdashboard/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9e3ee4d3e2596c958c832ed9062f00d7b03289fa32f9f3a5aacaf2a4974f47e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jenkins-for-jira-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb6219412d635487c17cb5e33f5085c2fced525cf0f510f8df2728d299f028f Any computer that has this package installed or running should be considered...

Malicious code in vsts-iiswebapp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 218ebf35158467cc942d14847b051f60d810e2ba76f2e48249bc955b0fce2e05 Any computer that has this package installed or running should be considered...

MAL-2025-5642 Malicious code in open-source-catalog (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3bfbe0348c0d5c8d07d2f1fe1b504717cbe1e2f686ce8d05381049ec4df11e0 Any computer that has this package installed or running should be considered...

Malicious code in pp-react-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d146bfc260c9899fbca17ca2d9a3084b57ba2c8245e364316af0a3c9ed4a6153 Any computer that has this package installed or running should be considered...

MAL-2025-5640 Malicious code in pp-react-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d146bfc260c9899fbca17ca2d9a3084b57ba2c8245e364316af0a3c9ed4a6153 Any computer that has this package installed or running should be considered...

Malicious code in print-vault-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e05d07d0cbe84e8ef4ca39905adcf78905393b39d322ae7e582ad1ae99b177a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mttdocs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware beaa5b8141bfc9ba6d1eaaa989a534c5cfc5c7b84c82e6c3ed0c38d5112efbe4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nonsensetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37ff18d1f339dc2f014b88e051c067ad240533616538c4684d8666f02568d930 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...