MAL-2025-5550 Malicious code in dotenv-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 983b0b06a5013d619d699ddcdaf39ce8118a63537d7243760571684111b2c921 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5567 Malicious code in myrepotesting-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 699a8d5ecf04b9f79eb58425d416193bbb768ed786ea839d85fd4f46e827d017 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5563 Malicious code in json-cookie-jar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41f728e1c9ab68496a0fe986aed6d7eeb7a4ed694379b812a032240c95e2e39b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5552 Malicious code in env-info-checker-kyy3w4fiurevd8uy43wfre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d6fb3feadb029e83e642c54a8ffc29782d65e981a2bd769dc972463231215b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in queshyfrog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57a5464dffc93d4651bb797c39898229d6dd8e8dc9f66dc2ae6ca8cf4e70fbc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bonnet-ltd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90d8066c671e4c70fdd26ffc5ac6d901d34541c2cff4aaaf2c118c977078aec4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5573 Malicious code in queshyfrog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57a5464dffc93d4651bb797c39898229d6dd8e8dc9f66dc2ae6ca8cf4e70fbc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5580 Malicious code in rpc-selfbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b1911508710ad71ac01a6d39ebf112ea34136d68fe9c8631c647eb52e009b31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5556 Malicious code in frontend-building_blocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28828db7648dd2c99bf1bbda884e9f12b8f0a60ac0068a6c12e5ed0ce79cb651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wp-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bd25807808ab0722baeb487925a65428a1198b9ff17c596ae5c3a7ec1d05161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5562 Malicious code in ipmi-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ae45e03814e3e6804cac4e616877eecf2a0865d1ab813e7a2a273778899bc16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5588 Malicious code in wp-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bd25807808ab0722baeb487925a65428a1198b9ff17c596ae5c3a7ec1d05161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5587 Malicious code in twilio-webchat-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ab5419528c85b4b675bfd8bd45c7d107e151b10606f24a8ef7c9b9192dd6f14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5585 Malicious code in taskrouter-event-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6bba47f8505eeeef34953080b36ace84d8fd303c36ee00977a2d00f9447a4eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reqweaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 186187a80deaba9e48696b9c33ee7d2c73224d43193dcbf3d70bcc8f43569c9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5577 Malicious code in reqnexus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a31c15e8983c7c0c75cabb1793bb6f843ecd3a6b1e5801c364130affa95094c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5581 Malicious code in score-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddfca851a951dcfa02da040d550eff2bc8d72f8dc443582d195d066d32f9dbf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5565 Malicious code in melichat-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be50c9968d324f01849a45b03ed727ed17bdb07f26f70fd0957996a883370a35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5576 Malicious code in realtime-client-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949f22e5098ca5aee7073d984f9abc9e0e2fa8624224f842af24e4548844dfd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5549 Malicious code in display-node_utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 533971a15c86f5802466fd66868bd4b146ad0752358ce8b34a62761612f38630 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...