Malicious code in hardhat-deploy-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb9d3b8f687f5445ef66903c25ffaee9514d721441a15b7e4c4dfbf58caa7930 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-vhtml-slptypography (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05c2dc490463e3766704c773cd700c70323c52566cd3658a9acbdf5273f06655 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-babel-purify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dff19821615932cec55e91b56b5ef7b8974f053d6ec9dab32417601d23391b52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nextjs-babel-toastify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c1eb6ce58e4dc8f8a418262d19e1e72e07fb2892e20e7b7d647ff5a352479ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ytdl-vol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1dd6cf64d6aa793ef6c5994096a5eec3ba42a561c6194c2f8f63a215ec42f49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5568 Malicious code in neroxbail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daea843752c1f00a3fc0cd9f2ec9ec84c40263ca14403bb8444c4e00c6016976 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in neroxbail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daea843752c1f00a3fc0cd9f2ec9ec84c40263ca14403bb8444c4e00c6016976 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chunk-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2ede01f53bb06fadc20c1b7cca9c6d00685c017c3d99901a5cd8791140e2ddd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5583 Malicious code in solana-dextrade-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b8f89467fb69d00785530ca32444043368fe523570c7f428d485319782d845a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-dextrade-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b8f89467fb69d00785530ca32444043368fe523570c7f428d485319782d845a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dotenv-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 983b0b06a5013d619d699ddcdaf39ce8118a63537d7243760571684111b2c921 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in myrepotesting-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 699a8d5ecf04b9f79eb58425d416193bbb768ed786ea839d85fd4f46e827d017 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5539 Malicious code in @pwly/powerley-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cea10042520397029e8346d0d6b95495a3c2184102f2d8caedfff5b7e3d47b1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in myrepotesting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2e56c0a5a8413596292396f18104157f977d7f1f0a98f78bcf3d322a4812696 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5566 Malicious code in myrepotesting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2e56c0a5a8413596292396f18104157f977d7f1f0a98f78bcf3d322a4812696 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in json-cookie-jar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41f728e1c9ab68496a0fe986aed6d7eeb7a4ed694379b812a032240c95e2e39b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in env-info-checker-kyy3w4fiurevd8uy43wfre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d6fb3feadb029e83e642c54a8ffc29782d65e981a2bd769dc972463231215b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in queshymouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9ed49fc5c8d51a6b30914c50d0accfc41ed0ff18c278024d7305959eb9a7906 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-github-datasource (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 756c8548e63d376422abc6c7f12d97177a86331d9e8f4321c863bf8eeb5bf67a Any computer that has this package installed or running should be considered...

Malicious code in discord-rpc-presence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 643ae80a9f56002d18b03d93bba332b1c1c49c5d45f995a1269030b4a3c90b7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...