Malicious code in rose-web3-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e7bba39177d14d11698b3ccaeca36599df068894146efc99d0ded173449d9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in messages-hub-realestates-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f902696a7235fc0a580f821f3a36f77ccf00c8f14ad929cfbc6b22bb47459ff2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4630 Malicious code in messages-hub-realestates-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f902696a7235fc0a580f821f3a36f77ccf00c8f14ad929cfbc6b22bb47459ff2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cx-hub-interaction-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17ef553f1f7cb91bd70d99d55deeb1c83c604b68581cbbfaac1f9bddfbdbe6e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4613 Malicious code in rosetta-primitives (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 066c537cf24b296d35abde5f38191e4f60c82f7bd0583997251e70bdb2c21052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.meta.utilities (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 592e7d2fdd81405fea876197df41d2cca8625ba879c21ace66ff6e3fd9a699e5 Any computer that has this package installed or running should be considered...

Malicious code in @majidalfuttaim/maf-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2330446b43c4350ffd756e057399577c16b5b7b20767a3a71fc73b20664fe62 Any computer that has this package installed or running should be considered...

Malicious code in @chatbot-builder/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ace9cff4af8d9323da0b8644083e75867baace24814284462f536c574065052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4606 Malicious code in simpledep2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 785bcea7a5a8db24e8f8da4bf42202ea0b4bc0a1628446dd0c5275e964bc422e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4605 Malicious code in @worksmobile/wmeet-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f7e59ee05e9a26cf1609d57a7f477d90091a9aad3d2eb24673ece96f0addc5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in motion-exts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 601e06f31b115364fdcbdd0d794fb32ea363fdf0fcd281f3ce7f332b6337b8d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4598 Malicious code in motion-exts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 601e06f31b115364fdcbdd0d794fb32ea363fdf0fcd281f3ce7f332b6337b8d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in passport-jwt-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40c5dbee6898fcaf49fbac995a127fd5640725331d6ecc5a7a4b8cd71810039c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-svgr-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d55ebd57427c5d4a72a5d0b5c933540ce481fba40f3633f37618562ef4c8554e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4601 Malicious code in passport-jwt-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40c5dbee6898fcaf49fbac995a127fd5640725331d6ecc5a7a4b8cd71810039c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4604 Malicious code in vite-plugin-svgr-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d55ebd57427c5d4a72a5d0b5c933540ce481fba40f3633f37618562ef4c8554e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bugbounty208/sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3880eb4b27327dd3c26a3000c1d1f720ec589fc10d0d490bc532874c0c1c9ed2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in process-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca9b7f021303c59709dfd4a00e08e0c293215fade24f655e4fe0ff057ef40d4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-authgen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b288b33e1c8cf62fa86cc3a42c139bde6cc4674aec2cc0327ca503b64daf2a4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blesx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e5b8fa8d08e2e5e4608dc0698b4e0e20ce49e1c93bfdbb4b37334cda83f5f6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...