MAL-2025-4053 Malicious code in passport-approved-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd37d39cf77560cc97cd69ef60b460e1d5af2dd23e47526e9830093d13ea9c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in passport-approved-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd37d39cf77560cc97cd69ef60b460e1d5af2dd23e47526e9830093d13ea9c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4050 Malicious code in discord-clients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06928cb5dce29b93a1ece92d5bb04ef3a8731f510409097aef187e63be4890ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-provider-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc3ff80c31877ea658c6e65be0a05a240bf2a26f8c84e19e2dc75e88abbcd6c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3connectjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f387b5fbd03228464d4424e763f855d7e1327cd5b6d79fe4fddec7e9baa9107 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in evm-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494cc8b639f73ed70f7e4ee37496ef90ce35133711784f16e856e73ee4badb06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @act-platform/app-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3567b231d7c053086778a968fabe2174ddda3fff11c78d9973d2827aaef8d4e8 Any computer that has this package installed or running should be considered...

Malicious code in vtex.google-tag-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec8647ff7002efd9bfbcca725dbe03a4ef6644b991ada2bcfb6807480fb8eb4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v473 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1f24ada3129dc7b0a4310226f616f28d7a806b49c13b67ffdacff8aed8e0f2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4034 Malicious code in vtex.google-tag-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec8647ff7002efd9bfbcca725dbe03a4ef6644b991ada2bcfb6807480fb8eb4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3982 Malicious code in api-tecnisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03cf40376a567599ae485450f95be3ab8fe21b793b288e0e50031c702ad1c822 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hakai-xss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e8cc768298c405c50172bb23eff483fb8ceccc9bcaff232474cd9fc397e59cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in untitled_flourish_template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eca89dddd0c14d44ef018267a857a52c3061439e46d4efb3fe64bd4173005dc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ttd-lithium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73c711048944c634cd49e0952d573c5c48f00dd01c409ae7ddb3848ae960a6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wdpr-ra-javascript-native-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e2b40d8e2ee8d311cf5e007c4480255217d359bdde3c42115e42ad42f35dbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3995 Malicious code in grunt-mrg-enb-autoconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c04621f61f89e901d8cfe005449b45860ef03ccc63eee79c4250e31143c8169c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-mrg-enb-autoconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c04621f61f89e901d8cfe005449b45860ef03ccc63eee79c4250e31143c8169c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-autogen-bemdecl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cfa135e81fd4cc5ac6752ef4b886ab74fab9af400847c42cc4a489ac9f41875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3979 Malicious code in act1on3-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 164d9728bc36bd4864ac4b7b0aeebb622de7f64d90dd5cdaef72676d16c43b5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feast-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f88382c749d318e08be547eac655736cdeb1c86d92ae6ab6dd46e489e668c86f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...