MAL-2025-4976 Malicious code in client-vue3-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949b1148db60c58f37c8fec03067aa1974329c0f5719de4425b8840f213b5f2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arc-offsec-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10c818d61d5a433e8603351eaeaa1329d8a7365d5c6b8497143cf7c8e5c1f9f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in getsourcefile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44a69b03b0d5efbf48210cf0f786f2653910ba129aa89e00c5cd6a995f6ee9df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4985 Malicious code in getsourcefile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44a69b03b0d5efbf48210cf0f786f2653910ba129aa89e00c5cd6a995f6ee9df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in justsupport (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0717c9c1537a4bbe94634a39a76f580fad3206f21e5b3ec817f61c9384f442ba Any computer that has this package installed or running should be considered...

MAL-2025-5071 Malicious code in zora-metrics (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89561cb32e5173056b6ef51d8c685cac2ab304eca6024d37f963d31688e93820 Any computer that has this package installed or running should be considered...

Malicious code in zora-metrics (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89561cb32e5173056b6ef51d8c685cac2ab304eca6024d37f963d31688e93820 Any computer that has this package installed or running should be considered...

Malicious code in zora-logger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feca2e7f9d5aafeaafed7175bed1bc94f57e9d037a6427f54219d5a59ecca0a3 Any computer that has this package installed or running should be considered...

Malicious code in newcheckout (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab73dae51de90e537d8afaee36a7058bb0183de2d5489893830bd77d22b5e6f5 Any computer that has this package installed or running should be considered...

MAL-2025-4963 Malicious code in z0ra-helper (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ae1a970257032672e791f973b2735c2296a92f9af170ed32e74cb9145f113e6 Any computer that has this package installed or running should be considered...

MAL-2025-4962 Malicious code in zora1abs-protoc01-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e1f6f2a0db6c265885a73e2231e1e0b8b7498988fcbeb1acb543de2ff113770 Any computer that has this package installed or running should be considered...

MAL-2025-4982 Malicious code in comp-base-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86dd56ba61a953e19112e8fd19d04c755f48e262186426a358a7251dc398406f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in comp-base-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86dd56ba61a953e19112e8fd19d04c755f48e262186426a358a7251dc398406f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in utils-peak (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46c5cca2d9f2fbddb5143a1c1e4c6d607239cb78dffb27b196b3fa625c02926c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zora-exploit-payload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a09d84c94c165c768d88481e00efa77860f1237a66dc441e253dd480f1e476a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in snapshot-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b418521074d89cfa7dafcbd2a57c8ea782c643409c895f9ac30d372688473947 Any computer that has this package installed or running should be considered...

MAL-2025-4956 Malicious code in owncloud-activity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f185a6ebb16f2c76704506661c022be55d4d5fa2c82397aa60f5ef74cd38f879 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in owncloud-activity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f185a6ebb16f2c76704506661c022be55d4d5fa2c82397aa60f5ef74cd38f879 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in typescript-aurelia-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f456bd00aefe5bb2b77b87defb41f72c059fe860d67b0fd0dfdfc98baebb11a Any computer that has this package installed or running should be considered...

MAL-2025-4955 Malicious code in typescript-aurelia-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f456bd00aefe5bb2b77b87defb41f72c059fe860d67b0fd0dfdfc98baebb11a Any computer that has this package installed or running should be considered...