MAL-2025-5702 Malicious code in io.ox (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f943d7e85ce7b15cc0e8fa0f234c36503767f627e103ac8062d96f57504efbe4 Any computer that has this package installed or running should be considered...

MAL-2025-5646 Malicious code in corplogger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9bcb9f25864b2367cfc6d8ca1e691663a9f768c407c747273e385a74ce2d4fa Any computer that has this package installed or running should be considered...

Malicious code in notificationsandbox (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3e790882c7a117c75a3069325812c59c0c156533df2e6e4a1831adf1ea7710e Any computer that has this package installed or running should be considered...

MAL-2025-5634 Malicious code in token-renewal (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de8c5eaca0b97fb9aad23e47e1d86057e671884d4b4f12781413b41d3d01e358 Any computer that has this package installed or running should be considered...

MAL-2025-5811 Malicious code in dot-net-interactive-kernels (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fd9b96d8e362f39434da180321dd4529c19fd43df80c54c561a2db56794270e Any computer that has this package installed or running should be considered...

MAL-2025-5679 Malicious code in confluence-inline-tasks (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9108ffab0ab767db4d505617face5df5b4ffd6d83b9ad5b0be43b22f50f77f7 Any computer that has this package installed or running should be considered...

Malicious code in lz-evm-sdk-v1 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 171ea15aa901dba5305f361a9f0a2958fcbe7926518fa9f2467bf687b3a18c13 Any computer that has this package installed or running should be considered...

Malicious code in on-off-ramp-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b6976f60e83349939cda55fa116d6f3df6d085aea3969653b767ba47863deff Any computer that has this package installed or running should be considered...

MAL-2025-5618 Malicious code in mre-layout-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca72674752dda2346e914163e1a4ce3dd2a83b813747ebf2e4330596b0afb2c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @etech-flex-sre/ls-loading-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 487c2e88510b861b61f2ca278f6341fe808b6113fc956f64320585b8e83ca3a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5606 Malicious code in n8n-nodes-zalo-vts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fde0db4909194d627bc8646a788c5ba6d8decf0fc37ee2ca5100a8560e85ced1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5692 Malicious code in frontend-redux (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acdef714be7b489390b18befe70797dd12ccf6a4ce971ef0c840b5f3008dde9b Any computer that has this package installed or running should be considered...

MAL-2025-5610 Malicious code in regex-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b936ae131832162bed5acdfe48c28a3ce6537c1fc7a50b579166c37116b7d358 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5590 Malicious code in helioviewer.org (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40173395fee816f71bb3a20b762c39e1bd65badaed05ef884c1e4083b7e84107 Any computer that has this package installed or running should be considered...

MAL-2025-5560 Malicious code in hardhat-deploy-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb9d3b8f687f5445ef66903c25ffaee9514d721441a15b7e4c4dfbf58caa7930 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5550 Malicious code in dotenv-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 983b0b06a5013d619d699ddcdaf39ce8118a63537d7243760571684111b2c921 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5544 Malicious code in chunk-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2ede01f53bb06fadc20c1b7cca9c6d00685c017c3d99901a5cd8791140e2ddd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5573 Malicious code in queshyfrog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57a5464dffc93d4651bb797c39898229d6dd8e8dc9f66dc2ae6ca8cf4e70fbc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5585 Malicious code in taskrouter-event-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6bba47f8505eeeef34953080b36ace84d8fd303c36ee00977a2d00f9447a4eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5581 Malicious code in score-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddfca851a951dcfa02da040d550eff2bc8d72f8dc443582d195d066d32f9dbf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...