MAL-2025-3696 Malicious code in poc-npm-hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c566d52416b7be560224ad7d3f57924013882a6ee87a79754da4ba6f174c2106 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3271 Malicious code in node-json-converter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ffbaad687f777a1680340dedffa3333cb8f4e0ada8e0a886e7f798a9a59ee2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3263 Malicious code in task-bots (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be184e51a3aa435812d643ea00fe1f17effc4e16bb86a0b71882fb61f69573fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3247 Malicious code in fatfingers-helloo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 473958a91938ac87fe7925feadb207cc144a2e7e1d9cfe7f13029190825091e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a857cdec809c53bf25c1227ddbd8321b2d64ff54fb9963377b146116012d1e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3225 Malicious code in @harvest-finance/harvest-strategy-arbitrum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062f2e97a3824c2a6e95152cfe109cfeaa5426a6153438aad07eabee03820ba3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eco-solver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a8f7c5551c322952642a4ae7cfaa02b59bd51fd08667100bbcf22cda084b0e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in transactions-generation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 159707d341deafca8ddc267f10b9d6e45a2aa4ad7677dc24fa7f23202d0db1ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3227 Malicious code in @x-mlbtv/client-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88def9d7e31808e260a5f82c41a69f93b73929927370a5fbf3821cbdfb2d5103 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3232 Malicious code in bespoke-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50c8574065c05dfb54a421ce73341ceff847e8acdccdc1a8e800d12e6aee9f05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3215 Malicious code in @csds-web-components/csds-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dc035502fe2552360c01c2157ffadef0e94f13981a392ac55b634cac666e4d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3198 Malicious code in sharp-heic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6db9ffb0551887208262a5445e00bde6f964551601c407e01dfd493ef1b144e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3182 Malicious code in deltaprime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f16f2e9ed1af46506269c020785db3858769c420b642162e9fa880a6d2152edb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sasha-bsc-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6367569e4a02b7a1a9d97e0d7cc953768bdfbc31f96e2cc9deb7a5610eb149c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3160 Malicious code in okmanalright (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2727510b2d20ad0199648c80f577b241990e17e37d1fa598e2cee9a34d5716b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3152 Malicious code in goodluckforu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5854033dc24355896c6c0234a43876ea5cc4b241157df788bec8a3186a995a7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3141 Malicious code in ac-localnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3baed4fee6d491da54b31c19642059e4763ea8b9bfa42c0e8d9312ca4470016f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3088 Malicious code in @pump.fun/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5b2af9fba1ebc4eb008f281779b4d498271795051fc434a3c4a8e2e15f9e067 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3120 Malicious code in start-state-machine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 817dc6cbfa89267c683591874924c9aaf14005ca7e5da82c2d7ee55fccb52c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3095 Malicious code in debug11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494ce30e156e31a77830da340b86accd5cfe85da1c6bbbe4073277d4980b3009 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...