MAL-2025-5509 Malicious code in node-pretier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7de0fd2da3988016711f12d165ab5e9d22cf17a815aaeed0966944b96151dda5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5460 Malicious code in sizings (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 393af076bb3b03dbc0a98992d0876a85e7b2cea1450e48e012de0ba71943f8b5 Any computer that has this package installed or running should be considered...

MAL-2025-5433 Malicious code in mapbox-gl-js (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ada891fdc8acdf8af20afcf9782848cf7cf035176b623fdf8c82a3b046d43005 Any computer that has this package installed or running should be considered...

MAL-2025-5412 Malicious code in govuk_frontend_alpha (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaaf365f7859857e3e00a40b24b6c5c83485edea64290455cece2610cca84bc1 Any computer that has this package installed or running should be considered...

MAL-2025-5402 Malicious code in epic-mw (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6537e833320c30d33c6e8b2c61927748ebe0fc1066a6b60415d10c2d2470f7c Any computer that has this package installed or running should be considered...

MAL-2025-5385 Malicious code in core_block (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abec18e0e968ed67b5d8b1b959a5d9da2c3cfea29f9bd1ac711c0a2fe70d83de Any computer that has this package installed or running should be considered...

Malicious code in art19-web-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 833f7a38c823fdd26727d7a6aec9c75365b96860e4723badca46db54163128da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5215 Malicious code in mydummyproject-zyp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7385c16c060ed95f15f1eed55e51d69f17bc1768a7ed955da163b7e314b62df Any computer that has this package installed or running should be considered...

MAL-2025-5190 Malicious code in integromat-iml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6af30570799ed9c117bc1004bec1b6c1a0c75b8a53daa173ecb21f6f8f92216 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postcss-theme-vars (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f769581a5253a548235fa611543497af016d8733ffe11c1f0967ed8e185791e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5204 Malicious code in prismicio-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c1c6e5a3123f657ad2ed089a7eae83cd605ab7fb09da62d09d6b7a8b0cc039d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5434 Malicious code in math-utils-gava (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbfa97f4de0215f88db05e74ecb15d790ba8221495f33601d48f98303f3f93d4 Any computer that has this package installed or running should be considered...

MAL-2025-5186 Malicious code in styleprefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e908c22303869cc7d5722a3021d95376a9dd8052acef7cff8d4ec6454a3edd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wix-test-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f32874e6b4601548e20068ae573d90851c71b83f79bf2505dc2795f55e5aba Any computer that has this package installed or running should be considered...

MAL-2025-5165 Malicious code in js-log-print (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32f7c2522ad9654a06381397d330bacf9a768718488543199f85362870ee4d9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5156 Malicious code in dojo.data.itemfilereadstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5248266d6f2bd26fd740923ccbb40e78dcc1ed93f59dfbaf27e9b51c212f6a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5008 Malicious code in @openapi-platform/git-util (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96bf6ba53f72a3f15a38886bfb459f601a5de59cf964ebc169b368015d75e967 Any computer that has this package installed or running should be considered...

MAL-2025-5005 Malicious code in vscode-azurecontainerapps (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ad54ec265645c2e7358384082a1b1f2385a1caa652b65c359b13681a211b30 Any computer that has this package installed or running should be considered...

MAL-2025-4995 Malicious code in chii-aungpao (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d137cd4cbdcb873723e6209b260d08470543b42cffe8dcd42c3b31106ce78012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4981 Malicious code in vscode-spring-initializr (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eade5f13d9d6cf7678dfdf2bac67cfc29db071d6d1682cc6b3aadeac7561e30f Any computer that has this package installed or running should be considered...