MAL-2025-5228 Malicious code in integromat-udt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb547f8f18d38d6961a510a598d8741dcd0baf2f8218a0bb5ed899fb606c35ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in art19-web-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 833f7a38c823fdd26727d7a6aec9c75365b96860e4723badca46db54163128da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5220 Malicious code in applinks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c927df7579cbb8f129291c2b42746cc225d15855b821f735300d1773cbee4e5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5221 Malicious code in art19-web-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 833f7a38c823fdd26727d7a6aec9c75365b96860e4723badca46db54163128da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5238 Malicious code in websdk-colours (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 525b4f90e12d0654f3383e01859016dab00f6bbab39b2d38eeb165bb8f09b63e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nf-cl-logger-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f9af3e16698ffb1e46af4d45f8b046c0ac49c6e277db7b769a831468aa92894 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5233 Malicious code in nitro-contracts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcfdc095311c01986f57ec3730d8e3600f3c83ffb5fc23c500a51eed38ea048d Any computer that has this package installed or running should be considered...

MAL-2025-5215 Malicious code in mydummyproject-zyp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7385c16c060ed95f15f1eed55e51d69f17bc1768a7ed955da163b7e314b62df Any computer that has this package installed or running should be considered...

MAL-2025-5190 Malicious code in integromat-iml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6af30570799ed9c117bc1004bec1b6c1a0c75b8a53daa173ecb21f6f8f92216 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postcss-theme-vars (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f769581a5253a548235fa611543497af016d8733ffe11c1f0967ed8e185791e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5197 Malicious code in next-sweetalert2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8045e5172fb2ccb88fcd16b2a66207ca2896e30031828b942dffcf423ebbb6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5195 Malicious code in jsonwepjoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2597a5128b2b0328c056ce8b33af7f29686d36f80c3e90742da9645ae8d57351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5196 Malicious code in my_module_luckywater (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 877fa1cdddcd418b3581e3b6b1675085dbedcafe73f4d1162832ba3f5038985d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5191 Malicious code in @com.att.dtventertainment/dfw-pm-yo-space-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 806161588999d1c3f730dfe7672f8123c0cd3b6e2b28c00a6463f91ced635766 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prismicio-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c1c6e5a3123f657ad2ed089a7eae83cd605ab7fb09da62d09d6b7a8b0cc039d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5210 Malicious code in vscode-webview-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c554272558835d430a639e8f5586c55232eac880a493f0e8228bd4ac5e8d87d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5204 Malicious code in prismicio-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c1c6e5a3123f657ad2ed089a7eae83cd605ab7fb09da62d09d6b7a8b0cc039d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5434 Malicious code in math-utils-gava (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbfa97f4de0215f88db05e74ecb15d790ba8221495f33601d48f98303f3f93d4 Any computer that has this package installed or running should be considered...

MAL-2025-5179 Malicious code in axiom-src (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a03340569d36ca27ecb2ccddc04dd1ee351061a883a2b94494e35b47ffe9f6f3 Any computer that has this package installed or running should be considered...

MAL-2025-5186 Malicious code in styleprefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e908c22303869cc7d5722a3021d95376a9dd8052acef7cff8d4ec6454a3edd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...