Malicious code in prepare-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce87db23628075e87a946b6117721f8fd2f272b5d93e3447e78b58a4a09df2af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5676 Malicious code in chii-aungpao-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7612d6bbbfb9dc1ad7c5edf5f536d13eaa4e20da2e1a895caeacfb8b0e75140 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5660 Malicious code in @bosch-iot-console/rollouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a7c59a1a8e53130cfd7701d08a305d5e478e43a2a5b39f57258f504069f050 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5736 Malicious code in vite-tsauditlog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 830e528439887027d65ed0697132b3f91dc2b11e553dc12671446d5f6eea1b2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in restpilot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea95902e229e600fed776ab58f9216738dd1db24c03890b9902da283f3413623 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5725 Malicious code in restpilot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea95902e229e600fed776ab58f9216738dd1db24c03890b9902da283f3413623 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5702 Malicious code in io.ox (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f943d7e85ce7b15cc0e8fa0f234c36503767f627e103ac8062d96f57504efbe4 Any computer that has this package installed or running should be considered...

Malicious code in ru.rustore.core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00da899e7e957138cf68d9b59fa02210d5b3cae226639924b65810cfa7c4ce78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5824 Malicious code in securityresearchpocaplmalpkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b52864b8ab4058696fe0a34e9cdea2db8e1f9dec2fdb22fac1adeb4143cc63a0 Any computer that has this package installed or running should be considered...

MAL-2025-5646 Malicious code in corplogger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9bcb9f25864b2367cfc6d8ca1e691663a9f768c407c747273e385a74ce2d4fa Any computer that has this package installed or running should be considered...

MAL-2025-5647 Malicious code in vsts-iiswebapp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 218ebf35158467cc942d14847b051f60d810e2ba76f2e48249bc955b0fce2e05 Any computer that has this package installed or running should be considered...

Malicious code in notificationsandbox (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3e790882c7a117c75a3069325812c59c0c156533df2e6e4a1831adf1ea7710e Any computer that has this package installed or running should be considered...

MAL-2025-5639 Malicious code in print-vault-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e05d07d0cbe84e8ef4ca39905adcf78905393b39d322ae7e582ad1ae99b177a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5766 Malicious code in bazel-kotlin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e72bd563ced782c2a9514e4b3c995c7232eb432728faca3a7dcc9ec8f64ad2 Any computer that has this package installed or running should be considered...

MAL-2025-5634 Malicious code in token-renewal (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de8c5eaca0b97fb9aad23e47e1d86057e671884d4b4f12781413b41d3d01e358 Any computer that has this package installed or running should be considered...

MAL-2025-5632 Malicious code in auth0-styleguide-website (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ac62aa1f1cbfe11927a1bc4a54326be2b214f65a0d101d475bf45c44b0d96f4 Any computer that has this package installed or running should be considered...

MAL-2025-5631 Malicious code in canonical-bridge-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e38c4c4332b7b6efd48d2c9360444d99754e398a49f7099e1d7a5cef7fb22358 Any computer that has this package installed or running should be considered...

MAL-2025-5811 Malicious code in dot-net-interactive-kernels (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fd9b96d8e362f39434da180321dd4529c19fd43df80c54c561a2db56794270e Any computer that has this package installed or running should be considered...

MAL-2025-5711 Malicious code in oauth2-bearer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3aa2d2499cf414a068a46af982e2179810f9ca6fe985bc099dec22b8dc75469 Any computer that has this package installed or running should be considered...

MAL-2025-5678 Malicious code in confluence-drag-and-drop (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54563a65c5fe90e7a08c946b6834cd15582defd6ad21f41d09867195dc699b36 Any computer that has this package installed or running should be considered...