Malicious code in jimu-arcgis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7562fe8691e7f400454c23c32acb21241492a486b70e2d5e1cb597251c8e9c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5161 Malicious code in jimu-arcgis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7562fe8691e7f400454c23c32acb21241492a486b70e2d5e1cb597251c8e9c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adsk_react_axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a06612c4be43c43a557872482b9686a09f5b16a8d5f9c96611bcfae535406dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in comp-base-photoupload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5adac5ba125addda078885f62e39385b133893d4eb256e54e6761899c681a6d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5353 Malicious code in @wh-components/core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f644366e1954c7d526d983cd6b69bd9996467e9b6d790ccb06d26d903439a97 Any computer that has this package installed or running should be considered...

MAL-2025-5354 Malicious code in @wh-components/icons (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dfd313ae1d8791cc49f1a8210019c206b2f892b8709b6d0e93f78f06653caf1 Any computer that has this package installed or running should be considered...

Malicious code in @b10902118/note-xss-payload (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c32fc16a72dee911f560f1dc4b6915f586e2f408e93bfdb5b08d8c7444e7576 Any computer that has this package installed or running should be considered...

MAL-2025-5347 Malicious code in @b10902118/note-xss-payload (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c32fc16a72dee911f560f1dc4b6915f586e2f408e93bfdb5b08d8c7444e7576 Any computer that has this package installed or running should be considered...

MAL-2025-5159 Malicious code in flowmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4048b3f53349dffd22ba0305a35887afcb85a34660e7c2165ce6a98c2574761 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flowmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4048b3f53349dffd22ba0305a35887afcb85a34660e7c2165ce6a98c2574761 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-svg-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af2a1717363aad3bb129687fc2526ded4d96a8d7e578862b6d400cf5864e1985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pysvelte (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0d2f08ecacd3e0b9d9edb2f45b372b814e20fc212140150b8b727be6cecb89d Any computer that has this package installed or running should be considered...

Malicious code in app-prd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb4dfa072fe28f45493885c483db8e17cfb04c8c56db854534cfb053b52ebfc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3d884505401eed92805f1ab05ea82f7cb8f024bd1bc32a575f2068814a90a69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5150 Malicious code in app-prd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb4dfa072fe28f45493885c483db8e17cfb04c8c56db854534cfb053b52ebfc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-web3-adapter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12e75c393c8da1b623873b652c0e4024a25d635513e641c2c50d5899421160ec Any computer that has this package installed or running should be considered...

Malicious code in plugin-react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e88cbf7f87087cbc6dda9545bd987ae79997a0d8812613ac393f517941eb83e Any computer that has this package installed or running should be considered...

MAL-2025-5234 Malicious code in plugin-react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e88cbf7f87087cbc6dda9545bd987ae79997a0d8812613ac393f517941eb83e Any computer that has this package installed or running should be considered...

Malicious code in microviewreact (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb4aa3ed998e2cc248404754caf11f331bf993d7eb37d5eabdfeb08402bb69f8 Any computer that has this package installed or running should be considered...

MAL-2025-5184 Malicious code in microviewreact (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb4aa3ed998e2cc248404754caf11f331bf993d7eb37d5eabdfeb08402bb69f8 Any computer that has this package installed or running should be considered...