MAL-2025-312 Malicious code in site-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08f1194c6e49d7adf88a2a70415fcd789fab720cf63e7121963cff8fe1195fc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-293 Malicious code in domain-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14a682b54ff19305a641790fc1f96d99a5a4dab9277d7796627d1c34f6d80bac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-302 Malicious code in request-external-access (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf57b443887e773384068e114f407f70b10c0278c6839c0d5c34f2ba575a63a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dops-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7424d9aa8c2bde93f8112704428131dce54ddc6083fbc8eb880e289c3b1737e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdk-coin-btc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ae32f6f4577bb9bc54269aa0b6e1c46e849d1a36823c0cdea862d5eea40b5c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-306 Malicious code in sdk-coin-avaxp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ee94cfa5a5aa6b22e135137520e3b26398c9d013a5405d3240f7b3948507005 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-291 Malicious code in design-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7a60ac481f3005406c24eaaf2970a7d6d349201ce49fed87277a9436b52bddc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-268 Malicious code in aem-angular-editable-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fca4a582054bbff21e69768e3b5934e358df88c79f61073e65cf4272a8510544 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calypso-babel-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b19b336747cffb6dcd17e2bdf7369eaeffb28fe85d0c8198710e89dbced26e94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prem-babu-media (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccac29381b3bd14c6e4cb018f0bda417c6f15625becf906f6f965cf776b89570 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prem-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc7dddf8406e12d71eea827bdcb666be7fbcff46abe825fbdfe7f315f250b680 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-226 Malicious code in prem-fb-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fbb6df275aa4fd3a58792cb72b230546beeaa2fe12aae5f63ed5d516907fdf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in automerge-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1da244640f30c94a5a2ad3c103f42716ec4d5e1137c311309f817b111ecf8962 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-189 Malicious code in flutter_inappwebview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 394e259ceac6eb2a72e92a5882933facc39e1ad19e0bf1a6b908a92ce115a28f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adidas-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28226fc9d38372cbe92f7985bb3e187f7c0b05278acac32be1d2bbfaf7cda2e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-249 Malicious code in storytel.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eac8a26871ff9acbc3aae4118bf1e4716b305b8547d5fcd1f650c7fd5580b745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kubeflow-pipelines (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48fb3f0a2da611129fdadc65a4bb98ea67f4427bf3f7707de95c4b80ccb8eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-235 Malicious code in pyroscope-oss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78530d6378099081103c13a5d340a9c8562d2c041085a8c20893adb93bdd115d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-195 Malicious code in imports_exports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea5938b670954f2baac5b5cea2bc04aa6e747a8ddbd666cfc4a1a9188fc4016d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ssv-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d441396521f48556524fd4855d512807ec7548fc10a968ecc786535ee98dac6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...