PT-2025-17593 · Xrpl.Js · Xrpl.Js

Name of the Vulnerable Software and Affected Versions: xrpl.js versions 2.14.2, 4.2.1, 4.2.2, 4.2.3, 4.2.4 xrpl.js versions prior to 4.2.5 and 2.14.3 Description: xrpl.js is a JavaScript/TypeScript API for interacting with the XRP Ledger in Node.js and the browser. The affected versions of xrpl.j...

MAL-2025-3272 Malicious code in parkers-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f9f448cf013766182f01b29599a41fb76cf1411f0b9c2d6af6071ef3df0db2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3260 Malicious code in kernelcon-bad-packagexp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b23dcd407de61faa602b2eaaa097be5383c16cc1c62b28c707bd050dd46a1720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3258 Malicious code in ink-web-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7d7d7be1f1ae1e0b29b9c5187d8041c62c44f247b62c7a071b67a0e821fbac8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3195 Malicious code in neo4j-apoc-procedures (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ae32122ca71a7a075fce5993dbcdceca009308664157c1655b4b3897e205f3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3193 Malicious code in mongoose-to-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a3150653858c1f5fd60f8f54afa7d40ae107c6dbc5e01b1ead3c021fe39e0a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in highcharts-mouse-wheel-zoom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd3e7a1a5ccec6d7ad964e3183a5e78bcfd9722281b8205094e72ffcda8c26d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3157 Malicious code in moment-encryption (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff1ffe845cd41861606d3dc20d843dbe68a99b2db1e87c2e012b8a804a78c494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3144 Malicious code in awx-sme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1589ce6a2912b9485d4dbe439e4e45d59310f17ef83a03ad8dbc73d34f60cfdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3098 Malicious code in fastly-ip-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f926af7de5421ff4d32ead56bc3c4ee74df195c6f8fb78593010535faac8ed0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3122 Malicious code in tiktok_4d_webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee7b2f7d0a2a643de495f8b050981233231b51ed49c2dabb3e2de7b908b9fa7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3125 Malicious code in vue-device-momo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ae0b6eb55ed48ce32781c980e9b2dd1a16d1ef0bc62b3652e65ddad9e3da0f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3115 Malicious code in rapyd-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 824016d2b7d246c5d458bbc5e7049f1233aa5289743b511bf1c1096dba58aefd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in disputeapiserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c234d2a403bb56f5512a4d647adfb222f46622a11a2689576a5f882442a4b861 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3100 Malicious code in hide-console-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 553d9f1d98ecb2b448f09091adba1ab0cdce9e4f07391a50fc002ba74669645a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3042 Malicious code in @hongfangze/email (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d003c3bc820422c79a6708a76107d9828e3df78ada0a45bd3c6732eba57c888b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3035 Malicious code in @hongfangze/computer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f193d733695d36780af7e894963ab02c1590dba0234fd30623aa2ff3408b552d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3059 Malicious code in @nationalgeographicsociety/ngsui-core-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c79788b32fb541eecf3d0b0268cd2e201328ab9caf252358c1f9106c193acf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2780 Malicious code in pplinkpath (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b566f3227061147ddef30f6d4a452cec55caaf2812bfb5c44272f114fe21656 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postp2ptxnserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 477ef7e3eb9c560cf3beb43e8d618ba59ac783c7b0e17c6c2c1dba4c7050c38d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...