MAL-2025-4920 Malicious code in lazy-logrocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d35d13ebfd82c66db49337a0483da4a0c5460498a2a1a5941e45f1b44f05a1f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lpgoffers-api-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34828f326d1dd1fe0606f5f7560f90381fd6ce84f68f15ac551023c8fb52a2c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Network Hexagons under Attack: Secure Crowdsourcing of Geo-Referenced Data

A critical requirement for modern-day Intelligent Transportation Systems ITS is the ability to collect geo-referenced data from connected vehicles and mobile devices in a safe, secure and anonymous way. The Nexagon protocol, which builds on the IETF Locator/ID Separation Protocol LISP and the...

MAL-2025-4675 Malicious code in @sasmeee/ip-locator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3d296c24cd25db1d2f169b181325894d8d6331e3e3aa4e4f3014b8f3b40a56f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4676 Malicious code in @sasmeee/test-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67fed36f82c28952db0d301720c1d3e6a90d1c74f3c0ed4442b8731b1c9fc4e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in claude-pr-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78df9511839ca2f1261eadd3b5a9f886167ffbeb2e11f8d7c52f3470474d160e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4668 Malicious code in claude-pr-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78df9511839ca2f1261eadd3b5a9f886167ffbeb2e11f8d7c52f3470474d160e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4688 Malicious code in keypair-core-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c2a54a7dc344c67f1694d2a8f965c6ab161011af4fd98177d19a9536a0218b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in haji-fb-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c179e308c7e88b7d392065ed54495057f295048ce909d24f2345d5a28300d568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4687 Malicious code in haji-fb-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c179e308c7e88b7d392065ed54495057f295048ce909d24f2345d5a28300d568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4691 Malicious code in ownersv2-obfuscator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0f9f47de4b7578abfcf53d93e7033ba0e908053bac0650fee520c4effa57e26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in espresso-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8ce5ab7d96b084c2116afda967b080d56ed7a0dad48fe8ac7b67a1317824e8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4693 Malicious code in service-config-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40822518b54e1e34955d491e8ede52f50b7da5e2146715795dade573b232ec10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4685 Malicious code in fluro-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c04c138df7be76776b255750944cf66472503de25abd93507c7ab4d8edf33c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4694 Malicious code in some-private-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74c2eb038ada13a2b2c86adb72a460b9a2e327e9682b3ecce38839b4f8de281d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-api-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efac302be698778eb5fe49cde2fadcf3d675910622eaf3387754f96e332f87f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4683 Malicious code in express-api-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efac302be698778eb5fe49cde2fadcf3d675910622eaf3387754f96e332f87f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4642 Malicious code in figwrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cd13bb1130e41b3a2f595500f734384befef8c3107668edb6c2595730a13ddf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4654 Malicious code in plugin-svg-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 824299b29c64a19455bcdc235b9c2726b1ae00b364f8a549bb972a1be842eb43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4652 Malicious code in phlib-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a4915ab271cda053c8653639ad5f83905fae202cf8b9fbe4123e86db9b87911 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...