Malicious code in exclusiveminimum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 580fb091f79b9c79e7212a4cdb2627def3a8fa32d15fe35fbfda352b4c295ef0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aem-headless-web-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c61c407a36f3724be9f3b666bcb222c01ec3ccc693d6ed84475acbaf185abede Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1597 Malicious code in harper-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 711268fefafa8fa1f45484f2dbb4d83b7ca0c87621b54bcde26e36a9717059b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2236 Malicious code in @supera/share (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c348a3e52ca7aa30cd6b9bd7234d6385f1305e8c0f04c400ff236df303f06628 Any computer that has this package install...

Malicious code in archon6 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9926eff92492428efb3018691093b936b8924920a886240875a09cec72235ead Any computer that has this package install...

Malicious code in wasm-test-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware babc522f7d7785ae4fbf04d28f89e4db9b46fbec0308879dad88b4b27542f1bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in string-width-aliased (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da87811ca5c10d2b1336d454f91e621244269510433b79f3e5365176b8bcbe59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1494 Malicious code in publish-private-provider-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bab9547b7dc338e24a9c420f123daff70b59524719d6b302478d7987bf52e66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1482 Malicious code in get-gas-oracle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa46803ba15ebf06b3d92214a74ba203e31af1ed6ec4c410412efccd009dd0e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-native-android-library-simpl-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4460dc946645a2b0bcd6489a7ae7a24c7c2803c369d27f2efa3de46ab7735558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in list-files-in-pr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dec57d2d81d6a09a279dfc443753f7a1547d3c838aaf0ac20b735764a88c9b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1478 Malicious code in byted-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf324dae7bb985ac37aa0fff183e7f60d94c61c8b95b73049e79fcb49a52c27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1504 Malicious code in upm-ci-utils-tes-t (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3db67af7201afa722ce928a46979afb3ac375ebe370e32d0578fd2cca9119bc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in type-grid-extra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f90976adff32c133606410534095974fce326bc96f26bbb63e43607418796350 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opensource.razorpay.dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24d0cff23cd279c7679ff230e73f2030f97701dd01f54be53b182dbcf72e7dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1492 Malicious code in opensource.razorpay.dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24d0cff23cd279c7679ff230e73f2030f97701dd01f54be53b182dbcf72e7dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sysaid-infra-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32067df7060881cbe716c03dd7dc8c3b443263f314412e89e99a435622227b1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ab-typescript-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dff357f39e4f6c3cdfa2b8e8ef8d23e3b77159f31f825545ce19fd8a9150f869 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in suvauxlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5b9068f18c537a559453b7350d3d2a6fc61ea7a7988f11236ee6909550a41b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitstamp-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290131c8a4a16e54609d441ddef80033e6014ecd83f8d00a424f11b668329865 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...