Malicious code in api-key-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a88a62f8ea00d632d4e82aaad35c4ba5fc30f8c8974e967235a721edb9df9c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6180 Malicious code in mydealer-configuration-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a6c72b4ebdfecd3ab01a485711a49a10423d88ba0231b62418227c458a78a2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6172 Malicious code in kiwi-module-cdp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34281bc0357b483d9a5d7b84475fd6e4c2db6e993a61ff41636ee26e388368d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v730 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07e8e1cdef56b10548337d022340fca1a465be7d7a13b0ec39e4c2193d349102 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6168 Malicious code in internallib_v730 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07e8e1cdef56b10548337d022340fca1a465be7d7a13b0ec39e4c2193d349102 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-iot-twinmaker-grafana-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c4ed5abc6b9aacfab44cd41a0d5b9609603b25a6a318e051d71e9efa218d851 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-api-resource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6e5aa735ca90e3d4b1c2b9ddae5bf3ed653d41adb73daa46efc83ec5598561 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6179 Malicious code in mozilla-l10n-docs-linter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d878786926dde4c1aa2b65c2241ee43a14fbd2a46d890e608e4374ef405ff359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6019 Malicious code in websyncer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f28928dae23e5b709d60631f287c84a15f4bf8bf64751f67c67ac46659174837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6084 Malicious code in creator-portal-web (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5327398bd579ef0663ef6e1919049ade891f5f0f39b28f9314ce8d3a6040017 Any computer that has this package installed or running should be considered...

Malicious code in winston-compose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 981347a4b88ce00ab42b1a3f93b56d89cf28282070c617325e304221c6ce4882 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6001 Malicious code in react-hook-form-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7bbb033f9045b94810312d6c18ca8a53e34b6886863c10eaf2521f35349775c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5997 Malicious code in dex-sample-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5833f372bb58f2c3d63ada7d769c410b4464de4c9a0084d3e8f8ecbee863f4f Any computer that has this package installed or running should be considered...

Malicious code in @company-internal/logger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d0932de39c3f8c9bcb34c9f241df2d154d4659532cfddb67ddd06e283c38c14 Any computer that has this package installed or running should be considered...

Malicious code in npmdeco (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7c7110ed52ce1bc50ece55d4ed6f010f23d0ec5383c3b482208028e97eeab9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in okta-core-component (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32a2bc49ecdb3be636c0bbd744a8e1b52eb5b19d91316f69ce08d9cf870ed247 Any computer that has this package installed or running should be considered...

MAL-2025-5874 Malicious code in @gdcorp-digitalcare/ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8da7a1bf146c62ef01e4c0f8e5fb152aaff95eb02a94acb2909faff2779f3da8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5873 Malicious code in @gdcorp-commerce/cx-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28edf91ea21172ce7f3ff12d49071830bd423ed825a3b22b8e7228e1091cff42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5869 Malicious code in @gdcorp-commerce/cx-api-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 968087e3c7d66519a171ae24c3ff7965c24df722ea4b818bde5d1045acaba4ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grabcad-ui-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee52ce65db4a7eae9515a5809a148be63f55d250702390c261cd05e173132799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...