MAL-2025-47969 Malicious code in @pumpswap-sdk4/metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00e7cebe75e2b9e547a927e980ce03c494aa875762beaba4541eb71ef7222566 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47975 Malicious code in consumerweb-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb6a4d25e1e5232ce079c43523de3b71572bb90389aabf0dbebd38837fb89f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in consumerweb-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb6a4d25e1e5232ce079c43523de3b71572bb90389aabf0dbebd38837fb89f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47961 Malicious code in raecahaartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f607e854df80ada9b6aa0de8cae2e2893f1520b60bfaed0ba5ccee7aeb607b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rechxartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5cb88de7667d98496b7bf14bd3ced3b4e7f51a418eeab8e389ba0c15fbc9745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raechaartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9356d7106780c664ef4cc428fb0f72fc1165f196d819bb3a20fc0a86d648a0b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47948 Malicious code in orvllaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c14485f093ca8dc9ed7f8edb235eac174df0118b3960643c3c0c8ddc8d2bf7aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orvlla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56ea7ddcdbe3dab6e4c993804c781fc7cc5d3b48ffc11fea15a0adbee62d9296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solarpeng09 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6045df4a0e5e5868d4c68eb60bd906129c7659cae8c241c253675bcc7d56bd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solarpeng_node_eval4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eeb42c5e6381f2debe4e94826c8e1a29e0b0d730abf69e5ca521d768cde1ea04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47931 Malicious code in ocp-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7840fa3e2dfbea07d71767142edd939d438d07277cae8abc8dc00a497b3254f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47929 Malicious code in mcp-server-fixthis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4109cd9a0c196b277a25ff70ae8b8a81ee61aaac82c1d77bbb4e743496508e03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47913 Malicious code in @bs58-utils/wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c802bc1898c7a60b65bc2c2b2ce4d2c52bb29a73f0b93faa7c4e6e60998d32cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cryptodotjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1cfa09b618dc51e1ed65556120fb823276eaaaa7a3e75a2c684da978cd11842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47928 Malicious code in kecacapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9708d0d602f61799571f28e3206743afdc12aa74044857fe2a74d3755668f44e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47936 Malicious code in zdachboostv1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a28b54d5dff3b50a82a5cc25b9e54f948719b8e1fadb9701d3f96b02a5e843d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47921 Malicious code in @winstan/vinston (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 701c8532f7235adb3a68d19af65d9a7b583be566885ae32b443bb5789e58ec84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flight-suit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a6d36537b116f54f862bfade62a56a5be6181faa17c245d41201c57b229ae4e Any computer that has this package installed or running should be considered...

MAL-2025-48290 Malicious code in @pcxm/gasket-single-spa (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a9af818f322b10614f05f0798d081607acaf0edf591f3bc2ddd3fad0e4d3b10 Any computer that has this package installed or running should be considered...

MAL-2025-47903 Malicious code in mockup-plugin-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 558235acfe4f70dc63b4fc13a84d52053efc759496cd14e3be1174f7ae4ee3df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...