Malicious code in example-nodejs-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb2351b3777bfaea370237b22b5155a53e293162cb01bca791717b05107a4b7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2250 Malicious code in custom-networking-behavior (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dedb90c1c56915749973ff86ebfc51df188796ca9c8ca7a27e30a0434d19c9ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2266 Malicious code in mijn-bureau-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16c92a4b0e65219383cc8ed9abf729b1ae9a84f24fcdb6f9f5385235ca48c9e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2271 Malicious code in psd2-registration-example-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25af145935a5862c0a59e1214fee5a5bac0c1a1a7dab55da992f29b8bfa68131 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2274 Malicious code in react-textfit-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd133ed4ff9a23964d050578a197c7d8d9a45ba07d60f2d3b031b350bae49370 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in limit-order-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7ad6cba9faf323fb0ffae19f703ba40944f39673b2e8803037d19ff0990671f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atlas-user-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7efee27a6c041d66384de635910c04fe43fa2c193ad0a47efb69acb84fb16ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in realityspiral (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 750c382ff53ef751feeedfaf955cf5b12ff8fd6f91a1087c0616eddbab203913 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wrap.scrt.network (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb46cf4f945ffd141ee169ecf371a571f2692a3287c77efe8a9ea92c4811acb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PYSEC-2025-23

Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...

Malicious code in auth0-ai-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53d91c2333523a3496974b09552ff384b980de11cce7d7cf13b342b5f6351b77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypto-invoicer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce45f4356717c34ab095570b175a0fa8bb5c8b2929e42e73d1997dc8fdec3a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2187 Malicious code in process-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 756473e9e78d1d2db26cddd093eecff1900a2bb075716275fac12c4a760d6f9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2182 Malicious code in nazir-botjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ddab0c3325eaadec00a6d5eba950f178e3492648462583e41bb4d49b654fcf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2183 Malicious code in nazir-scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48a115000dc7228960ddb820e0687c73a67dccfb4f2eddcfc17b52247ba9a26c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @adminproxy/module-utils-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a2cafa2022fe884b6ebbf6b805ed194ed4b93c8b77b15f7d03940e069c9137 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2159 Malicious code in @adminproxy/module-utils-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ab70491510a9c9834ba70e271572b29b68b7cb19d3a0511123f7d1aebc2b001 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2188 Malicious code in requireform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99f289c40aca4d37d6a0e570ffff5b68ab746b09a266718bf794bb3fcda61b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2190 Malicious code in safe-events-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c5f0543a7347a07a6c8e5268d63a80e4043f47d8b45500c6c585b72d093b118 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2170 Malicious code in existdb-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ae58cae37f287aa42c1834fad59134abd2626470c5367777e185a57a36bcdc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...