MAL-2025-6003 Malicious code in sol-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f54238c3d0c543a0c99cd8dbe4ffee1a2ffe0ca8230dbd0c7a8f521259f38339 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in winston-compose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 981347a4b88ce00ab42b1a3f93b56d89cf28282070c617325e304221c6ce4882 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6001 Malicious code in react-hook-form-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7bbb033f9045b94810312d6c18ca8a53e34b6886863c10eaf2521f35349775c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5997 Malicious code in dex-sample-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5833f372bb58f2c3d63ada7d769c410b4464de4c9a0084d3e8f8ecbee863f4f Any computer that has this package installed or running should be considered...

Malicious code in @company-internal/logger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d0932de39c3f8c9bcb34c9f241df2d154d4659532cfddb67ddd06e283c38c14 Any computer that has this package installed or running should be considered...

MAL-2025-5991 Malicious code in lunasec (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52ffe1d0846a694f3b7e75d9064515e2cb7a42074ea0b54d8077d5bdb0cf3993 Any computer that has this package installed or running should be considered...

Malicious code in npmdeco (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7c7110ed52ce1bc50ece55d4ed6f010f23d0ec5383c3b482208028e97eeab9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5988 Malicious code in router-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d79988cd859092569021535b2a0ed329cc589611cb68ee789a342c0a1b0945e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in okta-core-component (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32a2bc49ecdb3be636c0bbd744a8e1b52eb5b19d91316f69ce08d9cf870ed247 Any computer that has this package installed or running should be considered...

MAL-2025-5990 Malicious code in xeno-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4584c129d15f1b447b33ff8077afcf4b79d34b44dd6c9752ffa9a028790f9bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5872 Malicious code in @gdcorp-commerce/cx-page-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e7cfb33d83efc9598ba1eef7145194848746d40838198d981254b66fd6a88b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5875 Malicious code in @gdcorp-digitalcare/ux-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fecefb3206cce5d5e5a87c2c7130d9cffdb74d4b163ca1bc8e14cedd902ae6b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5870 Malicious code in @gdcorp-commerce/cx-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10dd727785804adabaebb122da36be51c97a082214c8d6de8d70a1ad01f3b5e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5869 Malicious code in @gdcorp-commerce/cx-api-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 968087e3c7d66519a171ae24c3ff7965c24df722ea4b818bde5d1045acaba4ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5874 Malicious code in @gdcorp-digitalcare/ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8da7a1bf146c62ef01e4c0f8e5fb152aaff95eb02a94acb2909faff2779f3da8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5873 Malicious code in @gdcorp-commerce/cx-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28edf91ea21172ce7f3ff12d49071830bd423ed825a3b22b8e7228e1091cff42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5871 Malicious code in @gdcorp-commerce/cx-orders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ce80126682f56a0068ac541d5304235859cbf407b6945eee895e676fb186858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in enterprise-stencil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1e61d1ede34eeeb27d8845dbec391e8cc88fa906714cb1df64392d9332f46ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5978 Malicious code in worldapp-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2da9ba05e5b6a85d7e79f6f09caa465f7fff5f6fc536ed7daf7eaeb40bcf82eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5918 Malicious code in grabcad-ui-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee52ce65db4a7eae9515a5809a148be63f55d250702390c261cd05e173132799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...