MAL-2025-2535 Malicious code in tokes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d5e2d95dad58403b31cf8453a2e412a16f561203b18d33a2f293979a75f9243 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in syncdaemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5bb66f3a9159e25129919edb2f4a2e771c86ee56706bcddaa2c0c2fcbf0df0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2533 Malicious code in test111121112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e7f90b0dbff465793a22420e768063e39536ec5b397bd17e50a532bdeaf873c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2510 Malicious code in imagehostingserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4b1e6e385a1d2e359dd57308046e8187ed7987b73c146261436e52073ba8d64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2520 Malicious code in paymentapiplatformservice-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ac6842fa9d4708f9231bcffca06ec0806d5fe181a7e16ae1efe1cd6a37168c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2489 Malicious code in @accesshsc/access-forms-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5532f679e8c8daf9b32846e16d1f695ecbf0f601f32c63f11891266a56e71d78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in you-test-test-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13a9b3aed0c3abe33ee85f5fc9b7c0dd8020835cb6f1c038f1f6dd6822561a3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in malwaretesting2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 992d4e35601291d8af779953d2f285061a62412b41ee8a799245b99892ce7efc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2477 Malicious code in usedin1calculatedmember.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed860b89d268513c84a79e07ffa072fcfbdf3eccee1b2506900c48c49abd84dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2476 Malicious code in usedin1calculatedmember (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eadfffc66c23d984d3c0ee6fb0e8f591917bf5a155438c4e1e86bb4211db3da4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in contaxy-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e369d55f0561aa0c1af981aea283045a266800715c8ecfdcd178cece2cc853b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @financials/using-dep-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57594d4888118b288663b3c166cd3cefb4f30e8aebc4e4bed2f92a51945a33bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2452 Malicious code in @financials/ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4e926cb5ead89764d2bf06ee99599588691f94bf8e2bc5976cb73d5aa722bf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oasis-os-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0855cc5a073138729aaaff78692f8f6b631c4466abbd62dc4a8d7407b86ea5e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in key-lister (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f9c33eb066fce6253ba86498debbec8fe000ace68796a6bddf5d95e431551b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2396 Malicious code in node-key-lister (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8413c7c25ae9c9e0b081bebc1c89bec76f5966b57a9fa2dacfe631523a106f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dingpeng-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b75b0aa0d412d9ebbf20ed32ae7e5c4505eae72feb5ed57c0669192cb6ff8c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ding123123131 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45c68b87a0d236585f3f6cc5b18c3d73a4948ada4344c7a0a6d97f2c81db0364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in winston-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9a7a8915407cab1038d31144af0dc322ca271f4ddcd30cbf0e040dccc9b7dca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tsl-card-body (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3b827feadef7c2656600460243604631e02bc0a0b8ade3e8f317a7a5964ffd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...