Malicious code in @loybung/textfont (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36aa7aae9f52d1ffdfc4373795d75aa854663263402260a93cd100509f9a8833 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opensearch-with-grafana-lambdas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1610e128601e1cf8f57fb7382fb6310a88b8420bcf1aa66c7e0c8b488b5477dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4913 Malicious code in zlib1g-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa6efdb438d569565922df7e3f3cd142e51dd3fb1e1fe0467a71399e26930faf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uvicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4f7ba398a2a6f412706dc52b14ad4928a3863790d54c8553cf728b68d373b2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in throttling-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9b4f801ac497e2e730cbe31fe53c685dfa14df13b8db1dbb454e614a321ac8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tedious-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ac4ed635b00d44b10eedcd216610356c00baa2dcc266a9d461b148bd50e62c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in svelte-local-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf4b1abe16c287b8e67a7dae3b46466e04e1969aa24991fa44e889983bb2e86e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in statsmodels (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 652ecd7593c19928f04b76d12afc53ab879f625813dec79bde8d79ce065d24a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spring-security-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1c1536bc422839f96c59d0abf7e874f94ede428b9047a56668eb0293b047631 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in libxml2-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4180cf36e11e0565c87f4377f677fff16f320850f8f544b98c24eecd3cd96c7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4838 Malicious code in javascript-heap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83e06344668ac9569d6453b98d15e492e35ad313b880f085c08f7600b977a837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jasmine-marbers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 824ddfa5506db7a4f4cd6cef8dd72c19faeadaf9e70327d80a01f94a44c123f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-parser-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e78236f48c6c57e51a72f8df6807df4f6d5c0a5b386814bfc0ca2d0b81bd82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4813 Malicious code in axios-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f4be878ea1d01e3710f6957aa341c37ce7fd71b05bf6f8566af8cfd8bce0493 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bank-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0763ca6a35d86ac26d0d79bf3170ea38a642062f030c19ac17589065a5e1c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4718 Malicious code in pay-reconciler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2ebf90fee62eaa35da095882fe22a5cc2163801652334e5441101fb02a336b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fin-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 152ca8da5fc28154f53805661e135f5ae1a9f54f74564a97ce40a01bfb60f127 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in db-prd (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdfa8c0490d93357820e77f9a51a08b6c15f03a8ee291c238c1960064b545e55 Any computer that has this package installed or running should be considered...

MAL-2025-4744 Malicious code in gs-payments (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83d0ff4617e5d8536d36cf0582895637c1549337a25ffacd854bf066b33ce9fb Any computer that has this package installed or running should be considered...

MAL-2025-4765 Malicious code in staging-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 061358db77d2084ccc01236a956a493bd28d6e2f975a14bcd9651699a3eaf352 Any computer that has this package installed or running should be considered...