MAL-2025-3144 Malicious code in awx-sme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1589ce6a2912b9485d4dbe439e4e45d59310f17ef83a03ad8dbc73d34f60cfdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3098 Malicious code in fastly-ip-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f926af7de5421ff4d32ead56bc3c4ee74df195c6f8fb78593010535faac8ed0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3122 Malicious code in tiktok_4d_webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee7b2f7d0a2a643de495f8b050981233231b51ed49c2dabb3e2de7b908b9fa7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3125 Malicious code in vue-device-momo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ae0b6eb55ed48ce32781c980e9b2dd1a16d1ef0bc62b3652e65ddad9e3da0f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3115 Malicious code in rapyd-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 824016d2b7d246c5d458bbc5e7049f1233aa5289743b511bf1c1096dba58aefd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in disputeapiserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c234d2a403bb56f5512a4d647adfb222f46622a11a2689576a5f882442a4b861 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3100 Malicious code in hide-console-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 553d9f1d98ecb2b448f09091adba1ab0cdce9e4f07391a50fc002ba74669645a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3042 Malicious code in @hongfangze/email (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d003c3bc820422c79a6708a76107d9828e3df78ada0a45bd3c6732eba57c888b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3035 Malicious code in @hongfangze/computer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f193d733695d36780af7e894963ab02c1590dba0234fd30623aa2ff3408b552d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3059 Malicious code in @nationalgeographicsociety/ngsui-core-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c79788b32fb541eecf3d0b0268cd2e201328ab9caf252358c1f9106c193acf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postp2ptxnserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 477ef7e3eb9c560cf3beb43e8d618ba59ac783c7b0e17c6c2c1dba4c7050c38d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2780 Malicious code in pplinkpath (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b566f3227061147ddef30f6d4a452cec55caaf2812bfb5c44272f114fe21656 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2771 Malicious code in loka12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9aed27d2cda9232f5a1f5f6f5617f80af2d0d78ee5005efbbb3aff0b587ab4c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ecko-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a46943965c7587fa7324d2b2470423dd46497cf100d65a55135a1a3c01ef79c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2747 Malicious code in chai-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e5e72069ba26720347311e7e7b22423d276dea2bb108ac5fb162bb4312e4ccd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2661 Malicious code in consolidate-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cabd5f8487415db9bef4d60ff036c16f1390e7d129fa4fbd96045e096eb1e897 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2680 Malicious code in internallib_v72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfd62ceee47f0cd86d2f4187fac0af99eb626f31eecad5929dcd0d7797ec95ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2675 Malicious code in gson-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd315ab6614bdf716d90b22ff2804ff7594f8bfe856133c0d60bebaf9d241e79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2707 Malicious code in sfapm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 853b53676c5023f880be7c158c82254598429dca281399a1d04fb433be3e7908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sensort/mongoose-migrations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d546ccd4e110a5e2cdd36b9823cddd0fc873607ff587abfa2761ce711a5896bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...