Malicious code in legacy-actuator-support (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36c556dbf86cb7f6c937329b814614f149810c3959d22139e4f53b29edee481 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3166 Malicious code in stormapp765 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04a681db538ae851a3f840e7771e9cfbf20b575dbe1f061c22a0d00e4b9b333c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ac-async-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18c30e40062c879e036cecb106668987fc0ac36f72dbc91dc345436419e79176 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stormapp765 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04a681db538ae851a3f840e7771e9cfbf20b575dbe1f061c22a0d00e4b9b333c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ac-localnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3baed4fee6d491da54b31c19642059e4763ea8b9bfa42c0e8d9312ca4470016f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rlusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 629e6d48825f1e58a7575a37bc976ac9d955d1e6b0a8a3782539fd168ddc570e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dave-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5c5e4c9469fec2d35256dcb0afcf57d63e6cfcf6ef685cf0f916f05cedc34c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in valid-ip-ban (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8178b30a109e454369e72c1f8e3c53686457f2af96fee398ca102ad91681e92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3134 Malicious code in valid-ip-scope (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7465414603f3c8dda0d63ea47cec0337ce0286407a8c488100a46b5a78a5b49d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3133 Malicious code in valid-ip-ban (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8178b30a109e454369e72c1f8e3c53686457f2af96fee398ca102ad91681e92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @oldzeppelin/contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59936093e10e486bceef6e021a4ca771a2996cf612a809e2bea28243348f8968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @harvest-finance/harvest-strategy-polygon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de49a90e4d6b1a88dee0473346a18e2f27d007f4bc260eb2d2b9dbcf0f12cbed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telegram-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce62829b11f6b1d14180b7d6118a912d59527d30f5fc952fe5aa3416bab7b1f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3121 Malicious code in telegram-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce62829b11f6b1d14180b7d6118a912d59527d30f5fc952fe5aa3416bab7b1f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nasa-oss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3a9d37ef677c53402e3bce88d26fce433b1d75ac2dceb101ee7a5dd9f47ad50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3108 Malicious code in nasa-oss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3a9d37ef677c53402e3bce88d26fce433b1d75ac2dceb101ee7a5dd9f47ad50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prettier-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e45dae9f24ebe77c9b7a50a5c45b3a141874389968d29e773f3f2aa8633a0a9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skills-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ddd68a5caf984495eb4aae051d0bdd1bbfb4f1b8163b0dcb86fd996e7f24b16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whatwg-node-fetch-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1f59eebf54f348e9ae3e94af39368c59899516438f8b029e4db2d91f075ac95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aiprofilestyle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df8a0fbe19285d3f530a31346359a3a5f08e22eb0670845f1fd94b86d2ba97b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...