MAL-2025-6215 Malicious code in bingo-abstract-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c453cfd4d38bc70b9b47a64bb81b2c3c982b8811f3fefe95b1788b5a24340808 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in durilka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30237df1aa52d87c76f60c6ff031ed2283d3324ceb3a3d2aee7fb3a7d5788c1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6083 Malicious code in cosmjs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76cfd30c52a126f1b3dd180a97192143c9bd72a807c75e0d458a02ede65eb60e Any computer that has this package installed or running should be considered...

Malicious code in cosmjs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76cfd30c52a126f1b3dd180a97192143c9bd72a807c75e0d458a02ede65eb60e Any computer that has this package installed or running should be considered...

Malicious code in jcl-over-slf4j (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6765b8e788daac3b9fcad973360085b07eb23632ecc6e6a30030682e006ff607 Any computer that has this package installed or running should be considered...

Malicious code in chime-secrets (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cc6774ae4b544c6fe8a12fa6caac614e90dfc3e22551bd45e7e2ab1ec60bbfe Any computer that has this package installed or running should be considered...

MAL-2025-6139 Malicious code in @jaswanthlanka/mcp-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a96465d6f11fea13f3f126caaae8862a9a670604bed80b2fae713b7d4d241342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6145 Malicious code in adspaces (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98bf52674bcffb7dfa7f1020507c064e580e45c09a87f5e02f704b35893b0ae2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adspaces (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98bf52674bcffb7dfa7f1020507c064e580e45c09a87f5e02f704b35893b0ae2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloudmedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62e6d2716738fc8638adab6e75520d92c5b3a3f4cccdd5ada061be73131571cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6154 Malicious code in cloudmedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62e6d2716738fc8638adab6e75520d92c5b3a3f4cccdd5ada061be73131571cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6188 Malicious code in nodemail-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a1a416c6d186e11b3cc31cc998939044fa947ec048748fa3542568d609fc485 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6189 Malicious code in nodemailer-enhancer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc9c43546534172092180b5eb7cb00ad4bde99ac2caf6be2215bcdc3c17a1852 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6157 Malicious code in dc-dependencyv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1bceba71bc1fb5763544f1b3d59a2e3700738d0e6293319a1b3d20b3e3d3956 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6170 Malicious code in json-cookie-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be88f5a49c7d58722c535bb587afc5d0ca1e519b765a459881be4bd9ca3cdb8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6182 Malicious code in mydealer-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54d329ce146d06334e3713a20760ac8315306e6cde78b8ebb0394b443ea83a60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in api-key-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a88a62f8ea00d632d4e82aaad35c4ba5fc30f8c8974e967235a721edb9df9c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6183 Malicious code in navigation-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39b1dcf034a843e18501251d3a3e0d37d413b30645566c5a4c80fc17aee8cf15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6149 Malicious code in api-key-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a88a62f8ea00d632d4e82aaad35c4ba5fc30f8c8974e967235a721edb9df9c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6191 Malicious code in partnersservices-payoneer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bf0e98f995aa9aa5cd789c9dbcefb1c5c5320bba054d2c3c75950c65010ae5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...