MAL-2025-47882 Malicious code in com.unity.2d.pixel-perfect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7a67e51f9589346d26c184ae8ec584a2a6433b25cfb0189e71ba2ffad5f11d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in typing-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df9c677715e7d6777e0959af0efc0bdc272553cd5e6fe9a72febb54c080a10ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47831 Malicious code in notificationalerts (npm)

The package notificationalerts was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c1205ef89ec9b8ec887a5a8e4d166be6421e33f4d61a691c4bd2e7000ee5c14 Any computer that has this package installed or running should be considered fully...

Malicious code in @sev-ui-verse/ta-product-models (npm)

The package @sev-ui-verse/ta-product-models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d564367018a2440087b92862c41a4f2acf9fe9faf7c76a896fcf93f35b88642d Any computer that has this package installed or running should be...

Malicious code in @dropbox-photo-viewer/electron-app (npm)

The package @dropbox-photo-viewer/electron-app was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0e60f8bd38264b681d07237c310d98471fc7bfc1b9ab2bfabf4258bf01a9ea9 Any computer that has this package installed or running should be...

MAL-2025-47549 Malicious code in checkout-sheet-kit-react-native (npm)

The package checkout-sheet-kit-react-native was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54397e8e5f2da7ea785328f6913d946c6a1a7daaab2b703580781f80f4e19726 Any computer that has this package installed or running should be...

MAL-2025-47556 Malicious code in giffgaff-status (npm)

The package giffgaff-status was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcde685cc836f4f80fa6ae182e03b2bd9bae41b818468a5bbde4e94cbd4443ff Any computer that has this package installed or running should be considered fully...

Malicious code in @sev-ui-verse/event-tracking (npm)

The package @sev-ui-verse/event-tracking was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 456d3a4ed1bb864eafcf6a65c30be392f9dc9ac1342ab0c1cd51cc463f11ff7f Any computer that has this package installed or running should be considere...

MAL-2025-47525 Malicious code in @laposte-okapi/okapi-developpeur-web (npm)

The package @laposte-okapi/okapi-developpeur-web was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fcb0f9f61fe02913727ec56f5391d8c9f0e028d6696ab70d97e68222b7642ca Any computer that has this package installed or running should be...

MAL-2025-47524 Malicious code in @kahoot-frontend/builder-common (npm)

The package @kahoot-frontend/builder-common was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f53ccdf6a282cfb91d99e8cccd2eea71cc0e2af65b1838e33733b3b872cec92e Any computer that has this package installed or running should be...

Malicious code in postman-converters (npm)

The package postman-converters was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f892ed43c85774f667cf9303e6d7ca7d30763a23dc3c6bb4e2261954dfee9070 Any computer that has this package installed or running should be considered fully...

MAL-2025-47552 Malicious code in dotenvx-config (npm)

The package dotenvx-config was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1b17bc0067221fd1c252545277d6c9462a5c5ef95cfcdf96f7e320699387861 Any computer that has this package installed or running should be considered fully...

Malicious code in internallib_v249 (npm)

The package internallibv249 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bfc2ee2f10bc7dbcd77e6d27b549eb1055695fcb4b3cd0940acd02e6b679429 Any computer that has this package installed or running should be considered fully...

MAL-2025-47521 Malicious code in sha256-validation-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3290610bb31bf5689be7241b664ae5eb52b47b834fff3e2597c5ab75d88c4bec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bscrypt-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37b6a67f2ab3d64e12a4e1f6217f05bc3966886112b32fa46bfc0d26db96c06f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iconfont-icons (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b7bb9c2f9da72d5f2921c8a1f5f168c03307649d8ed230ea031fde029d890c0 Any computer that has this package installed or running should be considered...

Malicious code in vite-plugin-parse-json (npm)

The package vite-plugin-parse-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4013d2b27a0c8568a2b51161431838d7877caf18d55e179597d06e162989b484 Any computer that has this package installed or running should be considered full...

Malicious code in fezbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ced7d3b77fec12a874f274f33a417e27bbf21e58f9dfe01e15c734c92286dbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47507 Malicious code in vite-jsconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f03bb7808458e6fe8226e85f4870698a47c60f6b846bd9f95283b27800b215ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47501 Malicious code in tailwind-cup-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b63b6f29071fd3e01046c19dd01c0f863e62d3c2fd92a1f51d040e5f06ec839 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...