MAL-2025-1098 Malicious code in cscropper-vue32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c632c2c22e753b9e5c7863e34fdee21f2cfc0a4e963540faa7314ba899dee79a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cs-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 481dd64f1bb368951028f0c7cb211c53754e51217edc6a8d89a31e8c9cc8ad9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1091 Malicious code in cs-templates-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7eab2131a229bf433f5924ee12b5bd1e1e393c31b3027c28aecb5a187057d23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discordjs-webclients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 168188008eac5d6566ff9dd1929ae45ef01c19a0f325ab680beb22b609aa1f5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1143 Malicious code in legacy_fbid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e67b6fd65aad6b8c4f5c408f3204f75ee3551c70a17958022911beed987b369 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1174 Malicious code in setan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eef3fa99fd3e4d15ed2b08d2e78ace1c63c6582e8af5be6dc244ab00d1e36f8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1176 Malicious code in socketdinacom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4459df3f96084582c2521387c98e79539d5c8292c2cd1834447782864728aabd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in argus3-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73ab56cb9a768521f617a9a164f47af13ad0d91027ac9f172b9fd5c8b9835d45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1062 Malicious code in aptos-cctp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b6cd02da8fc37ab7c63f1d8889bff2a948798c518d8d3ba61554aacbfa61546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1073 Malicious code in chialisp-lsp-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6dd3d79d6053db1cd153f11977e45ca5dabfc1ed73e22a68e807ce879e5be59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1125 Malicious code in gateway-hsm-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0749bb94e6b7e493b7f25152e4ebfc6d99b6e4e59fe32b075860382d66089417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1056 Malicious code in action-doctl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c01cc18428c5e64e38347a9be7579cecbcafbaeec2cf75f6a004d40f036f2911 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1129 Malicious code in hakana-vscode-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4283dda977b9f5905c6752d3d3f8b09b8a15f375ee7d903bb800e86d10e2db11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in world-id-cloud-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d426aafebc49ece5e901783812aae442cd394ad918b10e797b1fc10f9e56d0f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1179 Malicious code in tinyquickstartreactnative (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2ffe206600babcdd429e51d21c0d9e150d1542aef0b6eef05cd70294e35da1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1170 Malicious code in pulumi-automation-sdk-ssh-tunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffa176b4dcf4483a947e659d4d4855bd174744d67a8ed98dadb4ddd425e41ea6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in overture2osmjs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4757db7655e3de9ca7fa7343ca0d8cd59c899c46454ca659ff07261b884f64db Any computer that has this package installed or running should be considered...

Malicious code in updatelanguagefiles (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e1b9ae3abf11e4ba584029f8f63912bd6afc637f8d6d6c0ee5ff4f1698b1610 Any computer that has this package installed or running should be considered...

Malicious code in momnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db49a6a7ccd97fb305c1f35bd000db30977e139b1b9007a4e71975ee27b7b85d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telegram-util (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 259b69f583bb3ea0fcb76890f5361a9c8e9d784fcca352a51f4dd13e7d73e1c7 Any computer that has this package installed or...