Malicious code in vite-plugin-svgn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a99cde23a20b3b1af94f392f8111e499e64f0cc14b6e2244f9827519ca81d18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4794 Malicious code in @it-common/lbp_common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f47ad8887d3a6cf7a9ed49015421a0fdcde662db1ed194c1c753c1234254fd3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bzl_components-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e9d92ea6bf2f83b7f1ef5fda995c4ca9b06ee0c6e4666b1ac581d884dbae28f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @it-common/lbp_common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f47ad8887d3a6cf7a9ed49015421a0fdcde662db1ed194c1c753c1234254fd3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in quake-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fc94b03d9c8d469f9ca333a3c81e540147fdde58a3597b8514b5c771884fe3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mockup-js-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d47de2f1ea832ed5ca1de7b318fac1b4e38fd7f83c2b66d97c4c38cfab1da216 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-intlist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d68da68127cdae55b189751f3d17a5882f56394b012d93fc26e35c36fe6aa456 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yux-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32619602ea22f43c922bd51fb5af4f417fee447f162999a6e291f7f83a39e9a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vyre-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57da43ad0f9a21c167b302acb7f928a62f1ef095d41cdf9621fbe8424fd6cbd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fyre-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e82542784f34a2534dd1dd5917f6740c32611b9f154b5ef6a18a62a2934667f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in transaction-data-generation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1a6cb3f68b22b02db63a832b56fed4db00fc629b1b3540dbae8dc8114daa530 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsons-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c23d84cb2201d919fefd3fa95fc777c80ed4adbb5e2fc87e1e1430bcb6edab6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-jscookie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a039598d9f3f70e0ed6978355821d7e65491688a59a77f5167a54f7eb667437a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4829 Malicious code in express-jscookie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a039598d9f3f70e0ed6978355821d7e65491688a59a77f5167a54f7eb667437a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gwnodejssectest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 945c98471715434a1dc98a21b4a8b558d81cbd6ab0260d6b2d5146f54e0303ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4833 Malicious code in gwnodejssectest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 945c98471715434a1dc98a21b4a8b558d81cbd6ab0260d6b2d5146f54e0303ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zlib1g-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa6efdb438d569565922df7e3f3cd142e51dd3fb1e1fe0467a71399e26930faf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4910 Malicious code in winfsp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7373ebded5664ff6ffc6ef61005630f01b8030ae072e04b3cf05e2cd56c2b20e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in winfsp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7373ebded5664ff6ffc6ef61005630f01b8030ae072e04b3cf05e2cd56c2b20e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whatwg-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c673435a301e9ed1203058fbaa25ef8011da36b69d1e3fab4253ebe9e4a6513 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...