MAL-2025-241 Malicious code in smaato-shared-ui-audience-targeting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1fb6a2756f6c261829cb9bf265de88beb6c5b8a696325f5ffb0ae37c5acf0fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-255 Malicious code in vimium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44509dfaad88d7d41ce9ddaab892cf01041d180c4338febe1840b887a9edab1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-237 Malicious code in scrumretro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 322bb93a5561d27c4a0ae6e7b7615cc7a14dc59abd5d4426bf0ca07b5c71c181 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in automerge-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1da244640f30c94a5a2ad3c103f42716ec4d5e1137c311309f817b111ecf8962 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adidas-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28226fc9d38372cbe92f7985bb3e187f7c0b05278acac32be1d2bbfaf7cda2e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-218 Malicious code in plib-ai-chat-response (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bb6968faa9c60fde77ecfd7899ac822b379eb1a2e677efb8b2cffb55c94c95f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-189 Malicious code in flutter_inappwebview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 394e259ceac6eb2a72e92a5882933facc39e1ad19e0bf1a6b908a92ce115a28f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-163 Malicious code in automerge-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1da244640f30c94a5a2ad3c103f42716ec4d5e1137c311309f817b111ecf8962 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-249 Malicious code in storytel.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eac8a26871ff9acbc3aae4118bf1e4716b305b8547d5fcd1f650c7fd5580b745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-208 Malicious code in network-update-pricing-options (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9db8491c3bb7eae747fc02ec7dcd7becaf1f75468ebcacc0d42410bd0c22946f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-259 Malicious code in wc-skroutz-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 438709bf1de713b9fab756841aa4cba87bbfc22133ff796cb5ee46dcc8776d44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kubeflow-pipelines (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48fb3f0a2da611129fdadc65a4bb98ea67f4427bf3f7707de95c4b80ccb8eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-215 Malicious code in percy-cake-electron-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84391faa58dbd8fba6583b300874c0f4eeb13fef558586ce912dc3b8d9ba314a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-173 Malicious code in com.unity.assetbundlebrowser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cc638fbdda6e9a85e316d397fa90e5d3306ab3c17a078ce28307258664d6586 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-164 Malicious code in babel-plugin-styled-componentsss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5912584dcf93c8e94155d4393fdc3cd508541ab1c09a39e8ac2d4c2d93667f09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-190 Malicious code in frontend-testing-redefined (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85a3ef574dfd16ebf3d9533ff76d09cb94946f1acc9fb1708fc6239061a77c88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-169 Malicious code in braze-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5e81df6fadd36a9f51f5daab0483c919db2c42225a2e96eb0bf40c01be8eb16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in braze-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5e81df6fadd36a9f51f5daab0483c919db2c42225a2e96eb0bf40c01be8eb16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-203 Malicious code in lit-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93b9c347ec5af8b365551b745eba546f4653727af02eda54d682aa419d3a6178 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-167 Malicious code in bc-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ca742de853894958cf8e34ed10d1e17d9584d7b71e3513b533c66a7a207067 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...