MAL-2025-4118 Malicious code in rpc-selfbot-v10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac2e07d59eef832d8c3e404342ed24b2b1e0c1e99b6f2807d004c5ae6e85ee84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4126 Malicious code in selfbot-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c00971d4d896820617ba1bb41eb75f5236353cf89f9c1498f5749044edd566 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whatsapp-flows-endpoint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c4ee7de20264bab033d4f4b998239b7301103ee91c1fc460817aef7cf14ab24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shaktihacker (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe742c824848f300f6e3b49b60c5ccd47bb3c258769cc8444d8e87ca6a3404af Any computer that has this package installed or running should be considered...

Malicious code in passport-approved-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd37d39cf77560cc97cd69ef60b460e1d5af2dd23e47526e9830093d13ea9c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4053 Malicious code in passport-approved-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd37d39cf77560cc97cd69ef60b460e1d5af2dd23e47526e9830093d13ea9c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4050 Malicious code in discord-clients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06928cb5dce29b93a1ece92d5bb04ef3a8731f510409097aef187e63be4890ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-provider-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc3ff80c31877ea658c6e65be0a05a240bf2a26f8c84e19e2dc75e88abbcd6c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3connectjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f387b5fbd03228464d4424e763f855d7e1327cd5b6d79fe4fddec7e9baa9107 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in evm-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494cc8b639f73ed70f7e4ee37496ef90ce35133711784f16e856e73ee4badb06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @act-platform/app-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3567b231d7c053086778a968fabe2174ddda3fff11c78d9973d2827aaef8d4e8 Any computer that has this package installed or running should be considered...

Malicious code in internallib_v473 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1f24ada3129dc7b0a4310226f616f28d7a806b49c13b67ffdacff8aed8e0f2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vtex.google-tag-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec8647ff7002efd9bfbcca725dbe03a4ef6644b991ada2bcfb6807480fb8eb4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3982 Malicious code in api-tecnisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03cf40376a567599ae485450f95be3ab8fe21b793b288e0e50031c702ad1c822 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4034 Malicious code in vtex.google-tag-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec8647ff7002efd9bfbcca725dbe03a4ef6644b991ada2bcfb6807480fb8eb4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hakai-xss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e8cc768298c405c50172bb23eff483fb8ceccc9bcaff232474cd9fc397e59cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ttd-lithium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73c711048944c634cd49e0952d573c5c48f00dd01c409ae7ddb3848ae960a6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in untitled_flourish_template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eca89dddd0c14d44ef018267a857a52c3061439e46d4efb3fe64bd4173005dc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wdpr-ra-javascript-native-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e2b40d8e2ee8d311cf5e007c4480255217d359bdde3c42115e42ad42f35dbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-autogen-bemdecl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cfa135e81fd4cc5ac6752ef4b886ab74fab9af400847c42cc4a489ac9f41875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...