MAL-2025-5667 Malicious code in appf-react-router-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bee107551e93c84b7b5e64794220ddf4898466e42cd01d1bdde8b41bb0cabd83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5662 Malicious code in @instant-postgres/neon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5998172caafd763bd9d8fc92acc7e18e96f4a14c19f5871e16257eaff6547366 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5673 Malicious code in ca-ui-carbon-toolkit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7fe942358c29b14aaa3755810e04ffe2cd696331434ed03a940060449bb9d05 Any computer that has this package installed or running should be considered...

MAL-2025-5599 Malicious code in libramat283 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2f0212ab46c6a0d5aabae8395896759602aea50351eb964e8292a154034fbd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5732 Malicious code in systemjs-builder-test (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de897090e555c8fe1834e43ec617a470a724ab1c0ffbf171899e4d839b3bbb07 Any computer that has this package installed or running should be considered...

MAL-2025-5589 Malicious code in ytdl-vol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1dd6cf64d6aa793ef6c5994096a5eec3ba42a561c6194c2f8f63a215ec42f49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-rpc-presence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 643ae80a9f56002d18b03d93bba332b1c1c49c5d45f995a1269030b4a3c90b7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5555 Malicious code in fneves-my-test-poc2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19f8dc54c675177ab89e24f43db5f53227047e13b1433ee635e7b54b4dd64e43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5543 Malicious code in checkout-off-form-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2794bea0563c12742ee032a227b1f44559bcabd566aa8bdd5371569bde55ad32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in themeone-animate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e147615a6d4e51665cb5f31f094f28cbb4c79a9c3ea92899c8a0a37ea40bb4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5519 Malicious code in sdp-transform-grammar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26ec9a8ad7301b26c32473ba504289ab4b40d221d1de8d91e2d7119ab847b102 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5491 Malicious code in cloak-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d81546f41c53f13a46b7c372cd2ac89b76c664542fb9b1652357cde5323830f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5399 Malicious code in ee_else_ce (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1573503c97a28616ebbe0ac70f2124f6761b31b0ead756cc1b9e6a9b4a116127 Any computer that has this package installed or running should be considered...

MAL-2025-5525 Malicious code in very-zeld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec45b5cdcc59c7f8b7328486d203c3f448f7e43d5fdbcdd1ebecf25b6fb072f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5502 Malicious code in jsonlogs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de467478eb6a14c26e0545351ab7bf4545a3a66b145512c0b8babc5b8b3a51eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cf-install (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13bf383febbfbe211ef3966d1f7449a4bc3e6dafb727078945f859a53298a12c Any computer that has this package installed or running should be considered...

MAL-2025-5449 Malicious code in phantom-sdk-monorepo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64a02da8340505757389af71a4289fd4f3fd0825fdfcb80ecf3a848d8c3c6db0 Any computer that has this package installed or running should be considered...

MAL-2025-5281 Malicious code in json-webhooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 776d1361c31fc0cb7ceb907404e53747cde097dab00614dafac0820111281ad9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in callsign-async-runner (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 993c282c40085606e14525d46841a996c7a8dcd50109db7828093a3d60254942 Any computer that has this package installed or running should be considered...

MAL-2025-5222 Malicious code in bundle-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9c8b6161ffd8ada11e31a593266ea01307ba4ea6b7b0dad552cddc706c3beb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...