MAL-2025-2468 Malicious code in node-llama-cpp-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d27e255d94f63ec3b548fa8d9ba50b8565a5b534b5d4ea838571ef729ddec60d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2463 Malicious code in ear-gui-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2627c1c30ce11ca3ef62b95cc12a6777f5fba58b16815c1ec7b4f8c38af0ee67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2454 Malicious code in antilles-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56d8dfc3b79fa6493ab5f345589e54b0de205521c295c640001fda619a215e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ionicaiosampleapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae3e09f0b7537140686ef5504c21e18b301f44e502feb68aad99bd4c5346a876 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cryptomus-aurora-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db5768718bc2c708ec27865d8e381f97ca5fb81b191a946bc786bb0350aaec26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2416 Malicious code in snore-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2adbcccc555d322802b23b412a8a727bc22982f0fd574b51ca33e7ea4b89804 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rekilog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef04608cee8fdce58cca876b6f5e7cb4753ad72459148b7958b20c8526434769 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2384 Malicious code in fnd-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2bd94b1bacafc118701343fd0538943fa1b8d0f44cb6e2418ff9feb47ab171e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2370 Malicious code in data-ui-v (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31699b2697ce8618e833f2917ee401c8d6a8a1300cc5d48905de3fd7895c9577 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2397 Malicious code in oauth2-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cc95085eb1819e853bafa9792a2e3d1b7b761fd85657e25b110586cbb78d997 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2385 Malicious code in gl-emoji-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbf0085827239922ce13937a55f76a51d8017ed351ca34e30214b10670b558a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2437 Malicious code in zero-timeout-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88a6e8ed6991cf808053c17befcdab9455effa8b8510ef06d38f819ef7958071 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2390 Malicious code in needlecast_prodeng_bfg_ui_consumerclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 272f9b4996fbc4cfee6747503b6a638f698e0abc73f58320de726520712174ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2363 Malicious code in bigdopebro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baf62f671d87a93f755cd86da270bcd8a7cc804f896ab31d7332bdf34811afa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2351 Malicious code in @sheingroup/babetonight (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a9f5da4050017cefe506f3f3fe0288f57099a5eb659ecd363835423f33389eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sniper-hashing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50c012e4494af56a19f93746e9ed8953360220771f69cc28023e8b8bb3445e69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-ethers-react-ts-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8762e2209b41b4f6eb94a4d56674ed8d23f5ecba64034e0825fe7490fea5c78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dir-size-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f803eeed1967e8ae2cd3095d6f293153fe8b5574bbef8aa2191c4b2f862658f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @shein-components-test-ump/text-to-speech-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a51a7cd403f53cbbc65d804830060941af889d9ec0f60acd449b59f89a081e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2252 Malicious code in dir-size-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f803eeed1967e8ae2cd3095d6f293153fe8b5574bbef8aa2191c4b2f862658f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...