Malicious code in vite-logging-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efc641d41a5a062db57b5add42c3b87b5f0c2c434c694e7d512d62dce1dc7400 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dev-filterjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c489283b73201bf0c4469fb76e21a9f5346d08f364c05c4938cc39030d20b38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chii-aungpao (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d137cd4cbdcb873723e6209b260d08470543b42cffe8dcd42c3b31106ce78012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wasm-wasi-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 320ad464f0780881fe134c1e9990c2e1a180a2ab4b6b103e26439d8861709021 Any computer that has this package installed or running should be considered...

Malicious code in symboltotypenode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc2ee98d2f9315f44147559cccb724db19ec94c7d96292e89e16f379f8ca81bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in z0ra-helper (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ae1a970257032672e791f973b2735c2296a92f9af170ed32e74cb9145f113e6 Any computer that has this package installed or running should be considered...

Malicious code in customdropdownadapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e29bf2cb2ca6349ffa2030e7ae2a9d4f49fb302fc084fb3ace37e76b543b502 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in requests-json-overview-pkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0086e01d67b35f7c81bc1dd5ed909ade2520cf967356bfd3b4849d1372952a6a Any computer that has this package installed or running should be considered...

MAL-2025-4945 Malicious code in zora-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5434c40d3048f846ef1d268e25b386ee6000460a939ff2aa2d91dd67ea1e897d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zora-wallet-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2737a01b1cbbdc588edaadc6a0e02fe571afdcfe804c62a691270ab2e19eefd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-victim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfdba951804f9f995d7d98ea8a645ead6bc94767502ab6a7943133b5e34125f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dojo.aspect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d31fd63b97c3cdde47f88984fbd8825829cf78c16098685c438206151cbc31f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2131391b300bee27a2d4e470c16bf37492276c2e92a4895a34f5933d5d0602b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in talkingagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3405c426e57de2c17c74c5c754610648c613e377d1b63a59e24d767241599030 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mediawave/lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5728f228ecbe0dfd5db6afd530842107e9356201123b885d36418429c37ffbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ve-cores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e2fbdb6cafd7eab8bb680d66240f47ddaa35deaf4c5b4263899fab736fd522 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @loybung/hyper-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a646dc40194d6a79d5af905b5f0de4abf8ac46c73d1f0659c50454fa2ea9353 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4807 Malicious code in @loybung/unicode-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 977a645be3c24178c2efe83570b0da277294e1f25f354f1e01934a67a92ccf8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4796 Malicious code in @loybung/dous (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ccf330094f29593a658458ccb3e14e0b3ac191babdc7b94434156acf8275bd5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4804 Malicious code in @loybung/systeminfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5779cbba538d4eea9269a796d61711d7b6cd149d33927746618c91c35bf31496 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...