MAL-2025-4016 Malicious code in rpc-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95a994df6820b169db6c3e6b611d8a56f7a37b91c3af7ad09768225564cffe6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4017 Malicious code in safe-array-push (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49e28af59c0738d11c301ca9b1483179a08a52085b83b24da5b9bc0c551ab5cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3993 Malicious code in foobarzazarazrarzarzararararara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cf0fab44a3abede823198bb1ae9cbb097566d6be7f51ec3168416a38e652681 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3963 Malicious code in dojo_10 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8917f5f3c438feb5b1106f4aa4293fabc6fa81bff53105084df9e6113f0c6c0f Any computer that has this package installed or running should be considered...

MAL-2025-3954 Malicious code in morrrisjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46dee7d1b7f802394446206cf8bff0d4b68b96cfc7aaf1196fffe3ce0c106af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mfe-react-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f7835d0f6b232544302030371ac74d4c595860a04736a2ef54259a32993f9c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3945 Malicious code in cdpro-redux-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59b127bc162a0536b8fbb2ed7957448cae7028afe71ee85c61504d88f1cf8a36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3953 Malicious code in inter-frontend-lib-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20b043e0fa1aadc6d1e400a275d7c543cf31f466a312f5cd286fed159f700ec0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3921 Malicious code in ts-db-indicator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9556592a185a149af4a877ac348199cd0c69faf0fed158075c976b00585f8a3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3868 Malicious code in @thekrishnakarn/healthier-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0650d59765e93598c4da0841623af6a8f7c9eb7e91136841980a7117164a923 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3886 Malicious code in fb-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0508c19ea3b1a69283368c7abdee9f8cfdc4980c85582dbf3573b9db71328932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3918 Malicious code in solana-web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87dd8c18d15d4abbb750627cb9dfec4be3cd3fa1e2ae9d2ac8113cc0597f43d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arcademathjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 655da6e51b197ee6dc274cd7147f0488c545a7d83eb4626f78bacdd3d57d482b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3872 Malicious code in arcademathjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 655da6e51b197ee6dc274cd7147f0488c545a7d83eb4626f78bacdd3d57d482b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3946 Malicious code in compensation-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddf28334129095b5b6e45372c4624f6813fe73958398e24474dc3a1c0e1d18d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3823 Malicious code in ctalking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b0bd0f0689ac862a7c01e77498ff68470544cf1aa43dc3b59172ac04896d10b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3849 Malicious code in opensource-marketplace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 974526369e603fb5c185bc7f3413907573ba2934f77f38446e73607af8847fd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3834 Malicious code in imran-photo360-apis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50eee3813bcaa9eb9f2b3a96b47f8822b60b91073e385c5d3161fce029d42287 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mongoose-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3cfffa7f52f4e6d69ba4fc23ded09e40b630a939dac0ba79a7a72feb76aba11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3794 Malicious code in next-auth-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0038c51339b63eb3fe77a5d623ae004832f05cc831ff582362d202f30a49072 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...