MAL-2025-1642 Malicious code in vinothzomato-foremandns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91da1ea036e46f838dc1a3363e8472c6361e1a08bda6aa73fb22831159fbd379 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1628 Malicious code in sui-cctp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29b5e8f3f1a95ac872533b00563608aeb8925af6f289f6a5d77708faa801735e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1569 Malicious code in aem-headless-web-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c61c407a36f3724be9f3b666bcb222c01ec3ccc693d6ed84475acbaf185abede Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in huma-contracts-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffcd8e55c63708841725749619d1aa01ac52fa1345eab2c6dc53f3b9f2615581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1485 Malicious code in gutenberg-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8fb42c4eff5d51a88f1a658c1f8fa57f9f43e22f1d6220b0de54ab39b1df962 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1489 Malicious code in list-files-in-pr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dec57d2d81d6a09a279dfc443753f7a1547d3c838aaf0ac20b735764a88c9b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in byted-player-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3159d64d6d44643ec6d2d05b6743a1ac3985530d76b41810598a873c7d34218 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in multirpc-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca7a6b77df58901f3ac2f877998ea1904e3eb1178b8a90ebac3cfd990247f90a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1446 Malicious code in weex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3463fb43413f5f55fea549cc0240a5b8e3726099081d9d9379f10c772591d870 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1453 Malicious code in yizhifabao59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5dbe805e6d76dac9bacdd03a8404a4b9f868d77ceee1f73c59eeb698092b5768 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gestalt-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edc35868180fe5879113537fbdce9118cb06ace84a31d55fa9268d5bc050091e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1366 Malicious code in holahackerone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c18612fa91dc861c71f725e798c3acc7560a3f7735d2ec1291c3d90eec1f487f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uzx-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7250eab0a6f8a7fb2b339d8b38fdfeacce4a669afd92b62c4f271d460973faf Any computer that has this package install...

Malicious code in probit-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fda95aa29510bdadd84f77f4192894a8b7ba7729b1fa65823a21672fc9e7674 Any computer that has this package install...

MAL-2025-1242 Malicious code in dex-api-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cebe6e3901a157f586d6d5418f0a6995bf4d085c63acd7730784b55b744e65a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in drift-v1-cli (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc8e83d9fff21b8fd67210fa3db37e1aec46e02dc3da9b43ebbc8ce199d20723 Any computer that has this package installed or running should be considered...

Malicious code in deep-links-movie-tutorial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34a840de253ee6e7e6e03231c495a2d90bdaf338bf107fba5ed290ed21136e8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cache-dependency-binary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 719cb7b517dc44e5112a9f6aa3c73a8d8793719f5e0e544c9977820bb2689fe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1187 Malicious code in twitter-cldr-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6922d34a8a37d6986abdb98a1e9cfebc0151ed16d0b43cb410e9872171a62a79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lighthousebenchmarks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d28d7104583993cdedace4854b357cc6153c3dfbe0fea21886921324177c833 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...