MAL-2025-3777 Malicious code in zksync-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0af13565b82b48cb80a58f21db293bbef9f5ef83e1c4fdcf67534110215bab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3775 Malicious code in voting-client-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf794ee7b143c582d6e666fee322ea82e99f42c967869b76953c90e12821c6a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3822 Malicious code in conversation-extension-reservation (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad7a16b6e0fa02ae0a1ef8dca56998a19255781b3db06d6b7616a0392acc0d11 Any computer that has this package installed or running should be considered...

Malicious code in com.unity.platforms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 161c7b1f35e6c192a0f74cd71cf87b2b6436cc4528a32757f6901c2ce6ff7c07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3722 Malicious code in solhint-plugin-chainlink-solidity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 707e27ec2b3a13dafcee9d4ecd372bfd4422048e3ea95c8c5e57a6463777cee4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.list-view-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e62e603878259ca3d97124f0e3dd5225e75518c1572831a35e96a26b807e151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3721 Malicious code in braze-i18n-knockout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca6ae5dbaa6927991987f0b0e26192dcbfc2fbcbeeca91e3cb34621bd6f1a48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3869 Malicious code in albatross-test2-module (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a452ae314d4752629c6c4f9009c4e7e65249f015e18a4caf86ed8de23e26bc43 Any computer that has this package installed or running should be considered...

Malicious code in yandex-lego (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36575d1c04d04a70393c42d013dfb94f94d1dd8211785aaa3b08414cdf0fb421 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3668 Malicious code in yandex-lego (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36575d1c04d04a70393c42d013dfb94f94d1dd8211785aaa3b08414cdf0fb421 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gx-npm-messenger-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26007d847aa029d08defbaa44538b81f13b13adfd8edb4c7ea3fc335a439e0f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ias-dashboard-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c5e715ecf1204e540d58dcb1f94d07ca5724d7a1a0df89b355dbe88545c5185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ai-document-translation/ui-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c94ea05205ad6ac8c809be2fa22e18fae368f27f1f8bd34048528dc25daa90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3689 Malicious code in internal-lib-t1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0656cbf9afeeae51e03fe153910e1dad3a3840f219effb0583665acdfefb34ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3678 Malicious code in ascpc-npm-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dfc46bf902782d78e5120173d965b16776b6f7d52ac27e8b6a05eb734290dce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3688 Malicious code in identityaccesspointsrv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7c91d904c61ea0d0dc69c3d616a5b6fc69014bc5694f175191f4f661a33341a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3677 Malicious code in @starkgate/web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d04ac8d00e82f7a03fdd3b70ec5682e6ebde4a7fb03c4f1459f2b1125db11296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3673 Malicious code in @johndeere-tech/helios-ng-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cafd54c91f17226053b5247b4cd518c79cc4e6462f2bf35455fc9a9f8b55c42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3695 Malicious code in poc-malicious-sim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 492ab8807d8b13a8c7f47cccea0091ee128f7f8874756d736d2e50dd46d1ad07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3690 Malicious code in krnl-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a05d69f19cbdf8abd52c5c9a0197fbdc148fc4adc3a835890c3a148b1be4bf03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...