MAL-2025-1131 Malicious code in hiero-sdk-cpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61510394f06f71bb323c3d38fbd8d57e3ac9f52dd65bf7f1054e952798c9ac39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1061 Malicious code in anyswappoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11b4883135435c180fd5e1ec5f7f3d0ce3da30f86c240121ed36c3f2c09f1441 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1148 Malicious code in metamask-sdk-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 563827ad840866efcd9358d913c0a4e28044e336ac6d4ebc9a33c631afd70ed4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cscvue-unplugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a34e0f08d710a6b8c04716fa45de265e2171939895e01a7d62f79cdefe72152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in socketdinacom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4459df3f96084582c2521387c98e79539d5c8292c2cd1834447782864728aabd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1175 Malicious code in sg_personal_ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6af0cb60de927dce01894374e1ee9541828c4fbef00917a909bbeed4275a817b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ig-lighthouse-to-influxdb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92e8d076b669d18ea59535f03270a27adbfc6b0717789403453fabeb522b988b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-571 Malicious code in ebay-testeru (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10bc1dcc6bd74446e082ab66f1aa06c7ad778cd162497ed913f8b9678c4068b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-341 Malicious code in octuple (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0a813e1acd2a14c310cbf3dc20cc0b0fbc8e2f5b6063887fee20f70e177153a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-311 Malicious code in sdk-coin-btc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ae32f6f4577bb9bc54269aa0b6e1c46e849d1a36823c0cdea862d5eea40b5c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-273 Malicious code in babel-plugin-i18n-calypso (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5be90c4dbcb38fbd7461004561537640adcf0ee532efbe124872f5f11ebd82b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-287 Malicious code in composite-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb0895cfef58bc04374e30ca74fe5937d86332f548841883b7903c9cd2053af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-277 Malicious code in calypso-babel-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b19b336747cffb6dcd17e2bdf7369eaeffb28fe85d0c8198710e89dbced26e94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-299 Malicious code in no3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 322a77395d2488412e9dbb8c78327779c4912e90d1e0136e14fd924ceea5817c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-214 Malicious code in opensea-developer-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 692ba66619407967d692be9c0e70b5b297806cf1e398766ee1556657af6feba1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-238 Malicious code in selectkit1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d1e92cc92e640c0bf6819b70d715c79a4367d8a82101409a67189bc33c67ad4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-206 Malicious code in matic-child-subgraphs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 085980a7e031404b3267eff3f19584b087b5ce5329ce9fa17265b00ef3ea2f9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in matic-child-subgraphs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 085980a7e031404b3267eff3f19584b087b5ce5329ce9fa17265b00ef3ea2f9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-183 Malicious code in emoji-datasource-google-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3653a56d9d36fb380b98090ef118578ceed822d7bb1ab1a62d6a18fba5ed5b2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsexports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f561855348de37f202d4723acf874ab865606f3de38f9cc4ed3d91dc415e5368 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...