MAL-2025-1170 Malicious code in pulumi-automation-sdk-ssh-tunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffa176b4dcf4483a947e659d4d4855bd174744d67a8ed98dadb4ddd425e41ea6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in updatelanguagefiles (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e1b9ae3abf11e4ba584029f8f63912bd6afc637f8d6d6c0ee5ff4f1698b1610 Any computer that has this package installed or running should be considered...

Malicious code in momnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db49a6a7ccd97fb305c1f35bd000db30977e139b1b9007a4e71975ee27b7b85d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in digitalexp-datasource-definitions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36663c1c097e4ad0179af75313622f87a6e8b4c1ccd10cf2d93e5a505e4c2985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pascoresend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eb745bf1dd58bd41204dc547be9cadb3cbe35b5d804c45735c78cf6c33fe4ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-579 Malicious code in lexical-esm-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808bb38341306bbd08d655abd9928c5cf279412658db15774579d78f195f5a39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-569 Malicious code in ebay-testa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd3f3c0053b693abeb7f1b4c8862702ee0b78dd5e3c1b41fd82d039ed8686109 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bookingcom-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 797af29edb828b7011355ada91e0e1fab75d5725bf2213d65f47f4c1f407987a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bookingcom-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da4d630a63a612636008973224503694babc038514b8db52fe4e5bc3edea004c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in collapsible-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a424d4fcd62d35f9e9da962931dbc5fd39e9bfc3b4744a5f00c5e442b2ddb36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-367 Malicious code in webpathaxios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f7c0093824fe0d8cfd7562d8767a2c04967a0b885c02909ee03dc66cc5cab76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpathaxios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f7c0093824fe0d8cfd7562d8767a2c04967a0b885c02909ee03dc66cc5cab76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dell.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 615b5542a30acb872c70cdfcd28099420c22dd3edecf21285afee3a811f3e967 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-331 Malicious code in another-depconf-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6876487b755ba50effc916826fdb407f0f653893569fef933deb61a21a8d6626 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in legacy_vis_analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28ff9d6e37ea3e8b2d1b4748cd469a912ac50750610b909bfcf67f1fdc42e720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in built-with-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f426ea9ad545f39f1e84cd26ee384b096d08c2b82f8b3554f97fc1ce85fac83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-312 Malicious code in site-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08f1194c6e49d7adf88a2a70415fcd789fab720cf63e7121963cff8fe1195fc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-302 Malicious code in request-external-access (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf57b443887e773384068e114f407f70b10c0278c6839c0d5c34f2ba575a63a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-293 Malicious code in domain-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14a682b54ff19305a641790fc1f96d99a5a4dab9277d7796627d1c34f6d80bac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dops-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7424d9aa8c2bde93f8112704428131dce54ddc6083fbc8eb880e289c3b1737e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...