MAL-2025-4376 Malicious code in mshop2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b230b23967aac14c732f470e9bfd9d34d27bf592c1e3ca7150e827ef17cf5e91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in codeword (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aaf95d3c6934f346d9582d701dca64e259a66b0f2e42ed55c8c2b7096bf7af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in garena-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e17b9725323610c84d0eef5b07fd9caf89a9ee0ad67d94c35a07c61abdafbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bkeat-pytest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d2f35d5b97c478eafa7936e9bec8e276e048160fd82f2cb227e58d9870d107 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mshop2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b230b23967aac14c732f470e9bfd9d34d27bf592c1e3ca7150e827ef17cf5e91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mysteryicons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 761dd9bf68d296b54d1454be93f41203c905d2da690014d7ce8b029efecf0bf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kyutai-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eef195dd7dc3e7a30a2bbebaa32b71e36fd4e6a7ad2a7d67ee776953ca7faa3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4350 Malicious code in garena-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e17b9725323610c84d0eef5b07fd9caf89a9ee0ad67d94c35a07c61abdafbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4349 Malicious code in gacha-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d266c3cc45de6b63abc8c3898219a97982b9c5b400cc714f0cd62990fc0353c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4410 Malicious code in tgi-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dfb398d22e1b55329c8470ec5d984d35d24a20ca084875de34497095c3f4800 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4418 Malicious code in xlog-admin-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eb60334dd4f8546278e861e3dc7e4f69a46c5ed27bfe080fb6e77841fcbe4c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-window-rendering (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware befb1266ed27dcb7e09a8725163d0f8ca44b89e36ee02b3bc3bf904d312e230a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lcs-sistic-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b05382a541057365227516e05e0fe3aeec00d7087f6bfebae88ad20ac12209aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in url-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8a74e201fe0f57bea3516ddf0b2117217189749e17a77ef5219bf7df33abe79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.cloud.common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46d26c76ae3c3c9d4f0975262f4b276f17bdaa1b436737ff8fa006f42576d8d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.multiplayer.tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c13b40d85fcab5bdfc69f73e935783405ed1d0304f221df3da1726462e86953 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4294 Malicious code in @elementor-editor-github-actions/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca0d018cb1686918115a926a22fcb726e9d6aac8d9d35e08948585ffa5e7a91f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @demoability/loadgen-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77bc624f36bdc284db27e9759ccf30fab22108a753042ccbd6a575fc26f90b79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @elementor-editor-github-actions/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca0d018cb1686918115a926a22fcb726e9d6aac8d9d35e08948585ffa5e7a91f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.ml-agents (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfceda90642153626d064813e4c0c601ca81d18a6c5fd9e96855cbdee511db13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...