MAL-2025-176 Malicious code in core-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ef412a8312b13b80beb12231488912f1488467e51c76b84f58deacd8e57488c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-161 Malicious code in as-essential (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca79d9d4238a2b341541971bce5d43c48035839588832624bb45769b20fc33e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-197 Malicious code in jazz_token-authorizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3bd3fcfec7eb7354597369d7c1b2496841dbeabc3876ca1c150802f8bc3221f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-254 Malicious code in uber-direct-js-sdk-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30ee8294ed2bcf683f478b647f9919d6b45e0651905c29ada14a3ce392168447 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-105 Malicious code in turbiniactl-status (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc6838ef6d1c417a8e9148ecdf2b867dd4d49d6ffdfe1fc0f232917572a79d5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-84 Malicious code in ebay-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d6bb5a4bb9f4d66baa7a5b19bc2269a1f55c7a186b9b72c5c92c234e24d0b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-101 Malicious code in test-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cec52cb9100577a26a92a2e1e8965ef19244433a5a69078d2660fe96274c5199 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in controller-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34e748f33e1982598d357d378cb8b42a4361f9a056afdd2c66b16586e034fe41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-100 Malicious code in reqests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42036342744aae89af66ec705147456c19ef5f7f242f7d91251ca0bac5fe12ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reactnativecreativekitdemoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d947fc579794653736a44c851146ddc7e503173b00e1b3adf67c00ba851c5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41 Malicious code in solana-transaction-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 786862cc5bb54e2a1b9307f03e4cd67b11a7325ba9c251b3695b08d8e3383c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in private-bug-bounty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a00733ed27d2b66f512559495dc079196948c176ea93c337042bed009427afc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12040 Malicious code in slack-sns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dde2984debaba750af691ea1ba70116984fba098ecf0fe26a0fdf576d386f53a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11946 Malicious code in byted-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 601d1b950741fa25c188fd49b91f64f95cd11170ccea1ac1e731ba8dee490ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11950 Malicious code in client-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ec1b71ead6207ef37019d932ed7a23602447e0f32d5160121f97bc25284ebaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11954 Malicious code in client-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b9f11a230f7ff6aa85aa65ed5160eb5e4ebf5dea53582c1feb521964a5472a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11901 Malicious code in dex12212 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd70efd3b822fddc9faef296a7834c2a084ca44589d334e1dcb3b464cd9eb9de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dhp-logging-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware def2cfdcf7555dce8bc6545670a20f1748d6588683a817bc7d922f42c8e9cd43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-pillbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab745e5454a4aede527ec57bebcb7edd1700ad72e195f290ccf92b03eb3df0e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11207 Malicious code in crypto-layout-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fb00ef7ee21b6fc04fbef059a71415a1b6af8daf224b5e56df77ba85fa99351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...