Malicious code in @fff-web/fff-utilities (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b538001307782f76d2333a860fd4464fcd00ee81502f585e177ec62b0541262 Any computer that has this package installed or running should be considered...

MAL-2025-4544 Malicious code in @mc-donate/donateweb (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9325722a4b74dc591b6e7655a9bd06db9dff5b54b68de22c24fd2b38d03743ae Any computer that has this package installed or running should be considered...

Malicious code in @mc-donate/donateweb (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9325722a4b74dc591b6e7655a9bd06db9dff5b54b68de22c24fd2b38d03743ae Any computer that has this package installed or running should be considered...

CVE-2024-35189

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the...

Malicious code in react-stitches (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6aadb4042b3d0276837870bb016b686e41ca410df61fda4ecf6d6886a1a296a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dw-api-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed08393e26202c868c689620aab8691ce9d5f8dba49ed9802cca7d75fd2bb9f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in struct-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 003b22b8443887007116728f7f9a376db94e966dfeafcd33be4bc445e10bffc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4405 Malicious code in struct-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 003b22b8443887007116728f7f9a376db94e966dfeafcd33be4bc445e10bffc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a70b9997debf659f2b9059c7ceeb8f0709870b31e28b9f947c2c0f0acd4d0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in koishi-plugin-pinhaofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30ba527f97890bef38b3c287ded03788926167b31ef67011f5bb2eed00c04b8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in koishi-plugin-majjan-nanikiri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6887f78c1033e92ccb5aab19fb7c9403c34d9136624def09f8944b43603dfdeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4381 Malicious code in next-config-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbb8511354a8e80be373c9edaed805b675905ec0f8ec7758ee8e3dfdb253a4ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in next-config-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbb8511354a8e80be373c9edaed805b675905ec0f8ec7758ee8e3dfdb253a4ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feature-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97f8b69bc45a74bab5c69310a0fa0c0cd724a8d2cb1372feef78a963a76619c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in package-meta-resolver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fb37bcca1d8bf72c0bc4ef5c43c0d728bfe21662b56cc705c46f806c8a8e46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4384 Malicious code in package-meta-resolver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fb37bcca1d8bf72c0bc4ef5c43c0d728bfe21662b56cc705c46f806c8a8e46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in utility-capsule (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba9654434a81a009361bde687be9129ce9ccf194843c4fcce11e61409e4346ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-typescript-runtime-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be050b4e52992e8c09c9654e29825a2715f4b5a07c8b11c06bcb61163c525354 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feng-npm-test666 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ad520ab3e0e84f303e6b0e5e88dfcb8337c3d79c451bbbfc805f34020e1cdba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4411 Malicious code in transaction-generations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8ff356a1c2926c7e0ec73dee2112061e76093a5055a3930623e9c25a47af3d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...