Malicious code in my_module_luckywater (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 877fa1cdddcd418b3581e3b6b1675085dbedcafe73f4d1162832ba3f5038985d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonwepjoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2597a5128b2b0328c056ce8b33af7f29686d36f80c3e90742da9645ae8d57351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @com.att.dtventertainment/dfw-pm-yo-space-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 806161588999d1c3f730dfe7672f8123c0cd3b6e2b28c00a6463f91ced635766 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @com.att.vstb/vstb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 554029aed2bd3e734c058d64b6b283e3534367b5d8cf1d6162845499091f8ea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in somm-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f97c75802e77b1441a736bc934596858cb37f76df15372e07fd3ee7fbc2a5ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5198 Malicious code in pfm-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 166c95fcae61b48f203052e0464f5f7ccfe8df81b02fcd4d12440c0dbcc74893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vscode-webview-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c554272558835d430a639e8f5586c55232eac880a493f0e8228bd4ac5e8d87d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rma-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afd3860d2c559adbec7c4b9f7969ba91923264af177c77229e3f4a50e31f9ac7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fwc-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5660699712881dfe7a83949c97116e726a98d13a948aa245b1b0aebaab71632 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thunderbolt-features-loaders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee3eda7524a24da1ec85916ab8b93146e2e1399af30190b04b9021b0edbf7d61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5194 Malicious code in fwc-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5660699712881dfe7a83949c97116e726a98d13a948aa245b1b0aebaab71632 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5205 Malicious code in rma-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afd3860d2c559adbec7c4b9f7969ba91923264af177c77229e3f4a50e31f9ac7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5208 Malicious code in thunderbolt-features-loaders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee3eda7524a24da1ec85916ab8b93146e2e1399af30190b04b9021b0edbf7d61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rulai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23e395619a0bca0da893334e671820e1cbb6a2cb16eac6d86adc44b7aec33181 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5207 Malicious code in somm-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f97c75802e77b1441a736bc934596858cb37f76df15372e07fd3ee7fbc2a5ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pfm-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 166c95fcae61b48f203052e0464f5f7ccfe8df81b02fcd4d12440c0dbcc74893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in envs-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14d66a16720127b714fd0b4972d056bd66309e46b1cbf745656b742fe3bc33f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5206 Malicious code in rulai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23e395619a0bca0da893334e671820e1cbb6a2cb16eac6d86adc44b7aec33181 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in math-utils-gava (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbfa97f4de0215f88db05e74ecb15d790ba8221495f33601d48f98303f3f93d4 Any computer that has this package installed or running should be considered...

MAL-2025-5187 Malicious code in vscode-docker (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61618685e358ec6a20db218d79632439bfc8286cfea396d5184f9bdbd019f640 Any computer that has this package installed or running should be considered...