MAL-2025-6282 Malicious code in dndattachment (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d5607dc7a2158eb1b89fd59ca4547165e669f8047898b2735880390dd62a9dd Any computer that has this package installed or running should be considered...

MAL-2025-6234 Malicious code in nodejs-backpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb99e7712a778eec132a6648afa1e407630ce06d816611aade3e1e1986562f0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6279 Malicious code in db-connections-templates (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21f6e4f8c7542ce167e02d0a5da417230f30a924d39fff85b921a65f07baa938 Any computer that has this package installed or running should be considered...

Malicious code in openai-fm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8926ff7d91a01298fc220ba494c8948e0480927fffc10ee396d0dd3bfe6ba2e0 Any computer that has this package installed or running should be considered...

MAL-2025-6298 Malicious code in openai-fm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8926ff7d91a01298fc220ba494c8948e0480927fffc10ee396d0dd3bfe6ba2e0 Any computer that has this package installed or running should be considered...

MAL-2025-6216 Malicious code in bingo-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96e6e47500342e1cad70444862565ee48be2e2fc9f3d0e7dd92d8e8c662a231 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6215 Malicious code in bingo-abstract-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c453cfd4d38bc70b9b47a64bb81b2c3c982b8811f3fefe95b1788b5a24340808 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6217 Malicious code in bingo-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db9cd7f456a7e51d21294046604654fa4f3ec5b9ee11c7acd713ab08ad6838da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in durilka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30237df1aa52d87c76f60c6ff031ed2283d3324ceb3a3d2aee7fb3a7d5788c1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cosmjs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76cfd30c52a126f1b3dd180a97192143c9bd72a807c75e0d458a02ede65eb60e Any computer that has this package installed or running should be considered...

MAL-2025-6083 Malicious code in cosmjs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76cfd30c52a126f1b3dd180a97192143c9bd72a807c75e0d458a02ede65eb60e Any computer that has this package installed or running should be considered...

Malicious code in jcl-over-slf4j (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6765b8e788daac3b9fcad973360085b07eb23632ecc6e6a30030682e006ff607 Any computer that has this package installed or running should be considered...

Malicious code in chime-secrets (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cc6774ae4b544c6fe8a12fa6caac614e90dfc3e22551bd45e7e2ab1ec60bbfe Any computer that has this package installed or running should be considered...

MAL-2025-6139 Malicious code in @jaswanthlanka/mcp-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a96465d6f11fea13f3f126caaae8862a9a670604bed80b2fae713b7d4d241342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adspaces (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98bf52674bcffb7dfa7f1020507c064e580e45c09a87f5e02f704b35893b0ae2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6145 Malicious code in adspaces (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98bf52674bcffb7dfa7f1020507c064e580e45c09a87f5e02f704b35893b0ae2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloudmedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62e6d2716738fc8638adab6e75520d92c5b3a3f4cccdd5ada061be73131571cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6154 Malicious code in cloudmedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62e6d2716738fc8638adab6e75520d92c5b3a3f4cccdd5ada061be73131571cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6188 Malicious code in nodemail-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a1a416c6d186e11b3cc31cc998939044fa947ec048748fa3542568d609fc485 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6189 Malicious code in nodemailer-enhancer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc9c43546534172092180b5eb7cb00ad4bde99ac2caf6be2215bcdc3c17a1852 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...