MAL-2025-4094 Malicious code in lock-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0be45276ce7d117215945fe26ddbc98fb0cc53d60ecdaa71631175e44f8d4bb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4108 Malicious code in node-crypto-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cad7476ddf9290a5b4fa0e038b37e2133e0f5e5495e71bc825b1baf99d4e82f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4114 Malicious code in raydium-cpmm-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ce1aeff6f99c8c97def067abb89997e877fccd2ee6717b2d87516e0402cf08b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4112 Malicious code in pumpswap-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f6871522b8b5eebb3eca021b1ead1d42bf21998277934139af4406375de5558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4113 Malicious code in raydium-cpmm-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a68f5f91f0785da373b66be5a860df09b0d9ce675bc77749fe781b9d85d8a1bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4136 Malicious code in typescri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f04c3fc11a28f8c6d0deae7aa58501ba6e77e2641fac6e541e6ced55c8928c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4106 Malicious code in mousewhite66666 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a42a543d6a08c88dab207bc91355cd7fb9564d732b071b0ddfab43eb7f7fd5f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4123 Malicious code in save-me-pls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e53a2d57a5536d00cc75b7aa3e95b8f8d3373bc6da94392bbc578843872d648 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4104 Malicious code in module-dmall-discord.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d57f50d40effb7b9df9c15b7c206e22b3ffb792478ca1ee993e45c62fc4b40ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4093 Malicious code in keypair-utilsee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2a2d11e5c7234bf618c7909f22af17e0fd3787ec6e461114dfaca49fd2ef108 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4125 Malicious code in sdkss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f46cdba3fb83ff72cb7127859fb5140d6fc6f8ed207f45919c5c64bc494f3097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4066 Malicious code in chains.web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 162ab39d32e8af255dcaad40e29e294e4849e4c76273631024ddb7cc9a4398c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4076 Malicious code in dexfile.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 030322be28cfdc4341c3cf0199d441c986dbb8f4eee5783c7838c7c6af53a011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4073 Malicious code in create-qr-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58919bf64984f8dcdd4ec2802325f47fd7ef1a21aa8f1cb4d9c64549054122bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4091 Malicious code in karansinghshergill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d4793c012f03cb8335fa90470eac0ff4d868655a7f3c785d62ffb09b38bf8da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4124 Malicious code in scarce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a05097c7c77bf6e33475e2e38daf131934703a7c79c56548eb012316c01e7e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4107 Malicious code in neodium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22e6859d3022b758670d5c459846ac12039cacc27e7895501ba5544e3e3ecdb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4133 Malicious code in spite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d198fd58550e91a2f8ac51c4280ed47c6d337e019d2069c1f6cb85a849be38f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4069 Malicious code in com.meta.xr.sdk.avatars.sample.assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09a9d5a626622260968ebe26077b57efd3ec56b069d8808fe569f79523a7095a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-wavehttp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f86a00e28589e2a90709cc928ecf437d7df51dbe5685e8aa68dad43c7df6f77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...