MAL-2025-48123 Malicious code in redirect-53bw0r (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad8508ae60dd2e76adeb6562f88f89d517b008963e523a94eb6404b661045801 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48117 Malicious code in redirect-2aie58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4326d6ad5f6f6803c0cda761a364775547e60918fa3636368f1e60aab3bfb4fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48164 Malicious code in redirect-gbgbgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b98c4aba8fb703d8c02dd390d884b00f34bb0db7d5a8c76ca9b73037bc8c41f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48219 Malicious code in redirect-t8kcsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d48bdc09f7a339317e5e1351a51269a2f92801fc1e6c5fa906b2bfafbb23925f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48045 Malicious code in redirect-4iyfat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 308da4bae6f06eca09a47a9ffea24c1ed5afd9ce25ccb18c266d797c1f29e360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48069 Malicious code in redirect-prhts6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b32276d7067817b78f366ea8008f4de08e67019bec5e9362851a8940fd8d7c00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apijsuni1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc739fcfc81f8d8dc67032dc5092aaa2e25b397bc838baf43d99e10dff110057 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oxrvxxxxxaslllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbb43c3aa5e1fe9b33fc7a3c3a439ef7edd69817df8984551602b834f7b64584 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orvlllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ea46288aace45a16a2644e135cc0a6d6d0b1e5c276e3fc9d7dc2ac48369fbf8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47916 Malicious code in @hash-validator/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be7ccca438d061fd1d98fb1061421f517bccb37ba164e017caf7b8f8db366e2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @winstan/binston (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5a456158c683cc4e3bd977ec81310c39b3cf491b14458ed49766c0f58805cec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in e2e-test-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9c8d68688f22fea09a5713fa230e86e17ec757b0ab4f80311cbc5312fd0cbf0 Any computer that has this package installed or running should be considered...

Malicious code in react-device-mockup-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3997abd64511ef67ce5f8919344944698de3d8c04b73dee971d3ce6b3023493 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47888 Malicious code in lovable-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55d5b437f91405ceb1fe18cde50960c5b8ad03910dede2cbdd179627eed2d82e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47870 Malicious code in vite-plugin-parse-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0c3c9412f03ac4be0712f183133c219efac17d93edf28bf821d9dae53b7856e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47830 Malicious code in nodeapi-json (npm)

The package nodeapi-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adf38cc7ff9fedd8e0e5018c03c9141360823a8c5143181264185160ee040728 Any computer that has this package installed or running should be considered fully...

MAL-2025-47570 Malicious code in vite-plugin-optichunk (npm)

The package vite-plugin-optichunk was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6397b10743e7db5e33165e9561210449ade8c6671259d396b92d6c5bc9becb49 Any computer that has this package installed or running should be considered fully...

Malicious code in truelayer-service (npm)

The package truelayer-service was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc9900a38cc6f7543f01f0f226e5ac0ddf01b51bdc46b2e5da6caaf06ecc3155 Any computer that has this package installed or running should be considered fully...

MAL-2025-47565 Malicious code in postman-converters (npm)

The package postman-converters was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f892ed43c85774f667cf9303e6d7ca7d30763a23dc3c6bb4e2261954dfee9070 Any computer that has this package installed or running should be considered fully...

MAL-2025-47500 Malicious code in tailwind-computer-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fe2d038cea92762b28824efadea2c16ed3b4d33f8a9da09a6a3eece138fd159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...