Malicious code in internallib_v370 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c10422740b7cbb39e0369e25a7deefc65842295a36c5fb7c6d10182737b2df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3898 Malicious code in internallib_v625 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1942504b21b62677ca1a746463bfce2153d3915179537f0621e9b1adc4851b9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v625 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1942504b21b62677ca1a746463bfce2153d3915179537f0621e9b1adc4851b9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3897 Malicious code in internallib_v370 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c10422740b7cbb39e0369e25a7deefc65842295a36c5fb7c6d10182737b2df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npm-scrapper-faris (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ff29440d7ea5c240dc8376e18b662318b42eee0fdcdf7aa00c931bb46371416 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ephoto-api-faris (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ab94a5cdc5abc193f41c8ec94e6c008b88ec7e5121bfd6b73b514f6664a946f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3911 Malicious code in npm-scrapper-faris (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ff29440d7ea5c240dc8376e18b662318b42eee0fdcdf7aa00c931bb46371416 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in let-me-know (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f3ad0e2a6330c91c21a459de54a84f8ce2fdaaee7864cf564b92f63b4f25b21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lmk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2038ad5438e131b27ac4909e8adaf2ed1ce6a0667a10b46ed02c33209e2708a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3903 Malicious code in lmk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2038ad5438e131b27ac4909e8adaf2ed1ce6a0667a10b46ed02c33209e2708a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rollup-plugin-remove-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 230bae792624cf6834a21e884402488ab15faca4797c79b7312463de4faf0593 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vsock-sdk2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87d1181c9c02b4d4e06d16cac778739608a055f903fc4b34137a5186bfcb3152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3866 Malicious code in @by-device/fingerprint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0b58f4a1374ff973bdb10f587a6d3bc80207b12a8a85a4edc4f3db66139847f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @by-device/fingerprint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0b58f4a1374ff973bdb10f587a6d3bc80207b12a8a85a4edc4f3db66139847f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3924 Malicious code in vsock-sdk2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87d1181c9c02b4d4e06d16cac778739608a055f903fc4b34137a5186bfcb3152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twitter-api-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e845c35069d8dc1f87dbd947c508662a7462d951bfd0ccd915be80cb99502a96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3922 Malicious code in twitter-api-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e845c35069d8dc1f87dbd947c508662a7462d951bfd0ccd915be80cb99502a96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feed-testing-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37ecacad9f24ab5516c2aa28546214f1a2fa2f1156c02e06e9e9b8dc41365e8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-mount-point-unstable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a12f68daa4bc6ad2efd656ef3b93ae79f1783de0c3591c171aab5b331b1be2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cube-sign-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc7b296732045296d18c9e2c5c6ea0f8feaa1bd21693f62a60cea65af5525491 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...