Malicious code in venmo-ui (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c56cfa4b6e6b329cc9502a5eeea242d13fd03e156392465657d5254b441ecfe Any computer that has this package install...

MAL-2025-126 Malicious code in gouraud-lighting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfc362cce48bdb5f578a8b148d9c1883aa7b66c4613c09379816e9ab15ca89e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ebay-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d6bb5a4bb9f4d66baa7a5b19bc2269a1f55c7a186b9b72c5c92c234e24d0b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-86 Malicious code in efergvthdaadgfhrgewsfqwf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 894602cb30d010a59a8a636fbe8301d38272737acaab1eac0ccd85996644fe8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-108 Malicious code in uber-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fa7ffb884674d60abc64c70868821ad5ddf53d08897d0b90570c2d47ad780f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uber-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 514527f85a2deb8975f95374694c5dc8a3d09d328d3cb7adc36ea16d071367ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-81 Malicious code in daglavaa2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86db69121f626ba65cf72346dee7eda0b49516a7279168d161618ae3c9102203 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in daglavaa2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86db69121f626ba65cf72346dee7eda0b49516a7279168d161618ae3c9102203 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zetessf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54b4e49ae22e5325a2ed8fe3e7a32f36e50fdf5fda9ea594cf72b24bd9c97788 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hd-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c943ad884cdece67aea759ea5375c3dd587a13ab027bd8c58966ac0d4eb925a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12164 Malicious code in @swiggy-private/aatm-nirbhar-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4f8ac2cf93d0a30641db8302b039a8ee0911da0a1b76978e2a97938dc9e6918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @swiggy-private/aatm-nirbhar-bharat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c7b5be2c1f09619ffb810ecf32f211da2c461ad3b7370fd73eeb240b3ff90c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12165 Malicious code in @swiggy-private/aatm-nirbhar-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70df19b8ede6dfbed873f31e07221613884de772be25ee350a1115a2c544bc46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12166 Malicious code in @swiggy-private/analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 225aed6cf9dbdada3a5ab91f0b0804c55be22874bb11c2ad67624a420ff39026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in proton-parking-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 506697cca5654bda57571824a1c769ba976811a08a53a12e057f80fac4a610a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in centers-of-excellence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db7470e26934fe6244d0a4418e105a9007fb9f8357f17951f481193ce6a0888f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in data-strategy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cfbe801663c651296948ac9f501212d0f2dc63804b79fbbfbbd0534f2468018 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12156 Malicious code in sovryn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9da07494d6a7ce1406279823cdf09c1df8929ee54b5aac154cab1aa46f235552 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12139 Malicious code in casino-luzern-easter-fronten (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9657421a13075a125eb2aaf87ac5a9a905e170cc658ec3669ce78bcc359327b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-iot-samples-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 379933a89a9078f046a3ed35489373ccc8c0e070cef4700bbd90d36f087d5569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...