MAL-2025-5790 Malicious code in pkgsite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5342744a43bef74cacd9dd96822d1ef228384fe12a9a4d22fd8cc0a4fcfde6c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5780 Malicious code in grallama (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9a320b2690b732632ebf0fc3d95fb5e7b73a3da0fa8a36714880645805464c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5794 Malicious code in sandbox-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59c5f2d0637a754e0e34c42c8102f8273c2274724e47bfb3076b1f9761eb217e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6156 Malicious code in cookiefunctions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8afa900a1619d7588b19e54f31e967476f48fc0d956d06cd6dd045d965d36a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5775 Malicious code in ec2-github-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c7ca0d5642601c1f68fbd89dabf82a89747d310ed0196ea76061981bed79fd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in k6-studio-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 066503bf35690fb58f38fa44cc7e64d0eaf5a0e5f352167029b6a5ed00a448b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dt-automation-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6eeff9a72134c244b969bcd674f473359fea30bfe4423298194db75e255a238 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5777 Malicious code in grafana-csv-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9ad716a5ea97debbbad7d3b10d1b4a28c71a2e2b1143a6733443cc211de350f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5779 Malicious code in grafana-zabbix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0191ee6e16af65a4978ff84c89cc7d2849df8ea05a88a9462c05d4d000e5c66a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5754 Malicious code in @frontend-clients/wallet-web (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a1c436afb2775f8924af545aabce47a320ce8cab9c12dce05ed9e922a67d456 Any computer that has this package installed or running should be considered...

MAL-2025-5745 Malicious code in @nomicsfoundation/hardhat-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47ee3c366ab380260bf1b14296eaac2bfe3c76b726ea2c18b271e9e2af4b8f7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5839 Malicious code in @platform-clientextensions/rum-web (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d678372591aaec86ab2e50fe62d7a631a8d67a1ce9bca6147f6eabb2942cf907 Any computer that has this package installed or running should be considered...

MAL-2025-5753 Malicious code in win-utils-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99d55e34bfdccef418c3d9a32fed525e724c57d61a1128d9924506b8b25200e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5696 Malicious code in grafana-iot-sitewise-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97ddf55083335c582abfc892f9b5d93c8b5ee5232f0fa07ae4da45dd8eadc84b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5698 Malicious code in grafana-json-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0df63e5033b70f866f957f8443b533f09684b459897700f9ed44542d23b8fe82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oneapi-analysis-configurator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62a408f2d5e2b67773b97c7a264f55597c4afd65c8bd0858394b6fbff152ec17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ai-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 344da047769642e93f7d727b850c547fe9be2272daef99e44ef3f7c9b0f4bc77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5685 Malicious code in dry-rb.org (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cb554feb840a59c833bbd10911c129dbe4c18f03c9c6f70097517c20349f3b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5741 Malicious code in zigbee2mqtt.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e185d275e7942dc0c0abd3cbf5b1cba185b969d6d54054fb427fa26369283774 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5668 Malicious code in aspnetcore-reacy-sample-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e2b1e88eb171b5da54b5badc189d571ad6cfde7115103930a103f15f067c398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...