MAL-2025-4066 Malicious code in chains.web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 162ab39d32e8af255dcaad40e29e294e4849e4c76273631024ddb7cc9a4398c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4073 Malicious code in create-qr-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58919bf64984f8dcdd4ec2802325f47fd7ef1a21aa8f1cb4d9c64549054122bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4091 Malicious code in karansinghshergill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d4793c012f03cb8335fa90470eac0ff4d868655a7f3c785d62ffb09b38bf8da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4107 Malicious code in neodium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22e6859d3022b758670d5c459846ac12039cacc27e7895501ba5544e3e3ecdb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4133 Malicious code in spite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d198fd58550e91a2f8ac51c4280ed47c6d337e019d2069c1f6cb85a849be38f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4124 Malicious code in scarce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a05097c7c77bf6e33475e2e38daf131934703a7c79c56548eb012316c01e7e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4069 Malicious code in com.meta.xr.sdk.avatars.sample.assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09a9d5a626622260968ebe26077b57efd3ec56b069d8808fe569f79523a7095a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-wavehttp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f86a00e28589e2a90709cc928ecf437d7df51dbe5685e8aa68dad43c7df6f77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4110 Malicious code in node-wavehttp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f86a00e28589e2a90709cc928ecf437d7df51dbe5685e8aa68dad43c7df6f77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4061 Malicious code in axios-fingerprint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da96d284cb0fd11d177adc33e418d9729904db0a800e7a782c173dfb4901941d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4058 Malicious code in @ducksthegoatedone/ducks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07996ce8fcdd695995919d84cd1d62b1a127fab349bef9399e413b78c2ba1fab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4101 Malicious code in loveisbad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36fa8a1e12bbc84c5893bd3d80363dcb95e903bdfec8cfbe652082141fdad6d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4057 Malicious code in @confluence-classic/confluence-frontend-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cad26a08baa688242974598d13ff7ace16ad461012cab483bcadedb84953fe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4056 Malicious code in @confluence-classic/confluence-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4ff87b5122db88c06524939b2121d0aa2b413227824f46f1813bbbcc3f19d78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4070 Malicious code in company-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd5015b0393c3e2981f574bba469382525576dba01b38627ab06d4244bf497d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rpc-selffbott (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24aeadfdb12f863044ca5714c437fb59d3d8099cda972978383afa16bf96ef2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4130 Malicious code in selfbott-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 860baf78f0f4f83405dc224345b0d30845128219a809a6e76e89c17493419fda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4122 Malicious code in rpc-selffbottt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3c07eac1a0d04e26728125d74f3c6943fc7234cd4412cb6daf896b3abfcfef0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4121 Malicious code in rpc-selffbott (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24aeadfdb12f863044ca5714c437fb59d3d8099cda972978383afa16bf96ef2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4119 Malicious code in rpc-selfbottt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9c64c2b69b111e1ddfc8dc99d780ac832b4148262e160c4f68270f30c5edd33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...