Malicious code in launch-darkly-provider (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6696ff99444d08a99f63e53ce846b37cf11486968604779920e29d8ca0185d08 Any computer that has this package installed or running should be considered...

MAL-2025-4706 Malicious code in virtru-design-params (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c17dc3a9d15ee9a1acba1ea2eac04dd9544e09908d2014fcb8b9c689ba07c29 Any computer that has this package installed or running should be considered...

Malicious code in stake-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 505bc2ea5f7bcdaeafd338ab86be15a36425335f5d45c1b2d5d03d43068ab07f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4702 Malicious code in lpgoffers-api-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34828f326d1dd1fe0606f5f7560f90381fd6ce84f68f15ac551023c8fb52a2c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sa-sdk-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e0560589e860334ad0e8856779bd6f9872639d31e68f117ef013cb4dccb05d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4703 Malicious code in sa-sdk-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e0560589e860334ad0e8856779bd6f9872639d31e68f117ef013cb4dccb05d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4684 Malicious code in fluent-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbb5610bb518e5c4fa725a7a45bc66deb3ac1eec573f9b182d25cd20e93d5295 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fluent-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbb5610bb518e5c4fa725a7a45bc66deb3ac1eec573f9b182d25cd20e93d5295 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in conventional-changelog-action (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 824c344ea468bb338b2b69885de649068ca830ed86879b6b8d0142a646097470 Any computer that has this package installed or running should be considered...

MAL-2025-4735 Malicious code in conventional-changelog-action (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 824c344ea468bb338b2b69885de649068ca830ed86879b6b8d0142a646097470 Any computer that has this package installed or running should be considered...

Malicious code in @sasmeee/igdl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50d2d88fbf066d2cf61e4e0c78589fb68f9b35f261c3ee3bf1c852cb431272ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sasmeee/tkdl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e369ff2cd51d4106a9d5c63d747520d44d4f24c18d810d65fb7de9c2d16061 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sasmeee/gamble (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c87f47f35d7c73fd035a897353adf49aa127f906c05e5bb8ffa791b9465d8f71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sasmeee/test-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67fed36f82c28952db0d301720c1d3e6a90d1c74f3c0ed4442b8731b1c9fc4e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sasmeee/demoupload2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 010f01398a3d762a2f78d4620f4495c5cf865adc1d236a2c1b5f637a8429cf18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sasmeee/wabetainfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7027d0725ce64bc70ef8e7bfcafb2c6d3bf6101d0c98cf6d2e52f59a04fd87ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sasmeee/ip-locator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3d296c24cd25db1d2f169b181325894d8d6331e3e3aa4e4f3014b8f3b40a56f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4674 Malicious code in @sasmeee/igdl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50d2d88fbf066d2cf61e4e0c78589fb68f9b35f261c3ee3bf1c852cb431272ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pizza-delivery (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32883280f27dee6f08c25f84fa750e17fad3b3193488b14da6a77cddf52ef582 Any computer that has this package installed or running should be considered...

Malicious code in sechub-web-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f65f37c0cf500f985994b4ab4d2cc764e8072e70cc17aab91987e239129fa93 Any computer that has this package installed or running should be considered...