MAL-2025-282 Malicious code in calypso-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30b449bf6f8392b5520e508efa7924fc5e7561b8df1c6dda4e09db65693f2bc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-279 Malicious code in calypso-color-schemes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f99641bd891e5d4efbb233820890cd050e68eb6a5e71c23609dd1a1ed888254 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-269 Malicious code in aem-react-editable-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fdeb2ad3adadbbe85aa33bbaa3ed1728c9019c415d8c1e218db5f1f72661482 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-177 Malicious code in dbprivatekey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c73ecb3b4cea936607074ea606da153ea262e2a30aa18950ab2565f350cb6e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-218 Malicious code in plib-ai-chat-response (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bb6968faa9c60fde77ecfd7899ac822b379eb1a2e677efb8b2cffb55c94c95f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-237 Malicious code in scrumretro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 322bb93a5561d27c4a0ae6e7b7615cc7a14dc59abd5d4426bf0ca07b5c71c181 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-163 Malicious code in automerge-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1da244640f30c94a5a2ad3c103f42716ec4d5e1137c311309f817b111ecf8962 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-164 Malicious code in babel-plugin-styled-componentsss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5912584dcf93c8e94155d4393fdc3cd508541ab1c09a39e8ac2d4c2d93667f09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-190 Malicious code in frontend-testing-redefined (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85a3ef574dfd16ebf3d9533ff76d09cb94946f1acc9fb1708fc6239061a77c88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in braze-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5e81df6fadd36a9f51f5daab0483c919db2c42225a2e96eb0bf40c01be8eb16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-201 Malicious code in lib-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fe973aa7a191c3af7d728aa84fd8833989b5b4fa4cbb18ffff5595f890fa540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-194 Malicious code in ie8-dom-define (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bafd820b50caefd5e1af4ca12fcd7861408751d2ebe06de855897f04480f13c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-212 Malicious code in nr-reports-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83a07c3a21ffff09fba609e9879fbf9abb20469637967f526c6ef288a5bfeeb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lichess-org (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdb65e3664911d5ab4ab82caebca6255a38c6a150a4345389d6c934598101390 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-181 Malicious code in devopt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcf54c2d158de12c3d2d76b80c6977405217265d6e7da714233324d8cf8447ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-174 Malicious code in console-webapp-static-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 881f4b0e9d871a25620edd0bdf015644703eb56726d7b1785e5e0eb18ca32e36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-148 Malicious code in 3cx-call-control-apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca09aeb5dd1513eb46048a6987f18b72f8c9f52ba8340cefc8521c2138be8503 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uber-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fa7ffb884674d60abc64c70868821ad5ddf53d08897d0b90570c2d47ad780f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reqests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42036342744aae89af66ec705147456c19ef5f7f242f7d91251ca0bac5fe12ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-96 Malicious code in parentu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84a5df9317ab5999eff9bc664de61a5bf110b04b375e7107dc459d97ee2ac0d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...