MAL-2025-4754 Malicious code in nginx-internal (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a0f4d116d3fd75c3c8061c91010e1f912625a9860c89e5af3d3c912296d06de Any computer that has this package installed or running should be considered...

Malicious code in gs-payments-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13deac0bd384330c745707f11e00851a1a9fabd272ad4db4f7e8badf0406ae97 Any computer that has this package installed or running should be considered...

Malicious code in samba-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ac75992403506206a4cac9274cfd007d488518e22ee13ded71dc02282208b71 Any computer that has this package installed or running should be considered...

Malicious code in mssql-internal (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2304e726ecb296faa8d3bc0c0eca49fecae3b3aa9436713580d7a61a9d5b65c7 Any computer that has this package installed or running should be considered...

Malicious code in bsamba (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbd80a32e0db7567c4cdb3ae72a88e248bebdf428ab9979e0c7ed4456a4399f3 Any computer that has this package installed or running should be considered...

Malicious code in apple-api-fake (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4d50287073ec50503a3def9a3bd2b04b18b45b30a55b983b4e5f50ccc00b8a7 Any computer that has this package installed or running should be considered...

MAL-2025-4730 Malicious code in apple-api-fake (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4d50287073ec50503a3def9a3bd2b04b18b45b30a55b983b4e5f50ccc00b8a7 Any computer that has this package installed or running should be considered...

Malicious code in prod-interno (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4035c6d117b770c0967c5755bf98b52e5b1545995f5af7e8d0f470556b0b4373 Any computer that has this package installed or running should be considered...

MAL-2025-4759 Malicious code in prod-interno (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4035c6d117b770c0967c5755bf98b52e5b1545995f5af7e8d0f470556b0b4373 Any computer that has this package installed or running should be considered...

Malicious code in producao (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99363941e37afa24f68804511575b8cefa783188ad3a393c1f3e9359970178c6 Any computer that has this package installed or running should be considered...

Malicious code in staging-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 061358db77d2084ccc01236a956a493bd28d6e2f975a14bcd9651699a3eaf352 Any computer that has this package installed or running should be considered...

MAL-2025-4760 Malicious code in prod-shared (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 480110f6602e42420289e8da2e148e602ed3fc69063ba8c47edbcf8110c0c397 Any computer that has this package installed or running should be considered...

Malicious code in dev-api-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 258921e8b616b5a24a74d27aabeedac0438ae3474367a670f6b8d4b3af7a6f26 Any computer that has this package installed or running should be considered...

MAL-2025-4916 Malicious code in @yahoo-engadget/i13n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b0126ffaa6b21bad21996772209dce287f8a254cb6d7a85d835ea2dee07352c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fallback-screen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52fe4b497d3bc3400f0efb1ed4a088ae86c5df5b8b3bef8c7d61fb6e41fff413 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4767 Malicious code in tcp-app-activation-react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8b8acee879d06b50ea282023a2896ab53ab591f61f99513e23bc3a582e3bc1d Any computer that has this package installed or running should be considered...

Malicious code in ach-spa-facephi (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd75f718721082889a41c284f8f6a36bc2940f0041d4ff2257a7065e040b7d9c Any computer that has this package installed or running should be considered...

Malicious code in ac-mvc-data-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 169e9462eb068cce8b3da98f703f0be4a19c54ddaf088f9b6f23613ec34adbaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ac-object (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c8e3af8316e9f831ecb0049a57731e32431e9c7ca54d47aa83341f5774ccd83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4918 Malicious code in ac-object (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c8e3af8316e9f831ecb0049a57731e32431e9c7ca54d47aa83341f5774ccd83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...