MAL-2025-3643 Malicious code in sails-mssql-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9aa02c92e690ce82873d15a2bd8dab23940ca37b05b8dd851f223d17d91c923 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3636 Malicious code in meteor-roles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35e1fc58c157a731ac3f86cb748d151de5034b62c77de3149f0b97573789b402 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3634 Malicious code in lucide-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c571b67979d102e5ccf96df30cc81389915df3cafeda514d98b4ebd24ce031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3904 Malicious code in lrc20-js-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c80ed84544322e91ea371449b18229734f12afd46bd03c7f7a5a04947ce64ba7 Any computer that has this package installed or running should be considered...

MAL-2025-3567 Malicious code in array-length-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1eeb8fbe13dcffd2d78c2677d8add867f32dd32725416d8f2f71ff2df0ba6f62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3571 Malicious code in mymte2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc861b79eea3d82ab6dc25824fb7dad325622a6cbe4012fffe07ad7c198b4a73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chai-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5af472e8e9f91924f3ec3b28eec6184f13eee63ed37c2873f4042d81171682c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3539 Malicious code in nsemea-sample-parenttransaction-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41c3f9782e1fb062bef2307e7300491d25460f761f7e9da305bc92e541c850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3522 Malicious code in chalk-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5abfb3c6751ed538dfe27a650ca60f3526f4b93109eb8395da4e6b586efa0126 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3697 Malicious code in poc-sim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bc002dd617428d821e25cfa749908affae826cf40db7db85821cb7e344418ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3285 Malicious code in discord.js-selfbot-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab72c09e960ea50f08197c72eb549889779b0936abc22064b5adc5d2600361a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Compromised xrpl.js versions 4.2.1, 4.2.2, 4.2.3, 4.2.4, and 2.14.2

Impact Versions 4.2.1, 4.2.2, 4.2.3, and 4.2.4 of xrpl.js were compromised and contained malicious code designed to exfiltrate private keys. If you are using one of these versions, stop immediately and rotate any private keys or secrets used with affected systems. Version 2.14.2 is also malicious...

PT-2025-17593 · Xrpl.Js · Xrpl.Js

Name of the Vulnerable Software and Affected Versions: xrpl.js versions 2.14.2, 4.2.1, 4.2.2, 4.2.3, 4.2.4 xrpl.js versions prior to 4.2.5 and 2.14.3 Description: xrpl.js is a JavaScript/TypeScript API for interacting with the XRP Ledger in Node.js and the browser. The affected versions of xrpl.j...

MAL-2025-3272 Malicious code in parkers-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f9f448cf013766182f01b29599a41fb76cf1411f0b9c2d6af6071ef3df0db2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3260 Malicious code in kernelcon-bad-packagexp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b23dcd407de61faa602b2eaaa097be5383c16cc1c62b28c707bd050dd46a1720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3258 Malicious code in ink-web-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7d7d7be1f1ae1e0b29b9c5187d8041c62c44f247b62c7a071b67a0e821fbac8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3195 Malicious code in neo4j-apoc-procedures (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ae32122ca71a7a075fce5993dbcdceca009308664157c1655b4b3897e205f3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3193 Malicious code in mongoose-to-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a3150653858c1f5fd60f8f54afa7d40ae107c6dbc5e01b1ead3c021fe39e0a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in highcharts-mouse-wheel-zoom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd3e7a1a5ccec6d7ad964e3183a5e78bcfd9722281b8205094e72ffcda8c26d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3157 Malicious code in moment-encryption (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff1ffe845cd41861606d3dc20d843dbe68a99b2db1e87c2e012b8a804a78c494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...