MAL-2025-40 Malicious code in solana-stable-web-huks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29a7ad6d118f0ba506b171848b1e56b31b09fd44131fc96a3d14f41a323a5812 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-sentry-datasource (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f64ac119461c222b3a037a8fb79c1239e05e03cbce16d87f17ce6f1bb3a857a7 Any computer that has this package install...

Malicious code in @metrics-service/mf-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4515e226dd4aafab225dd128f71075baadf1fc7b2176ed97b19e90ae8aadb642 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11936 Malicious code in @add-wallet-exchange/type-api-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a8805bb9462f791743ade0e86d29e6c574fbdd3f67079d132694c9ac3409f0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in serum-dex-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23e693f28915ad1c0bf05e8f5e0e1cab49a329f00b7f27303d08ec76d8ab068f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12034 Malicious code in rodas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a32a859b94890e0e9f98e44e7e1371a0e22a191cb0a8324611736b601262baa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12024 Malicious code in private-bug-bounty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a00733ed27d2b66f512559495dc079196948c176ea93c337042bed009427afc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12012 Malicious code in o-share (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06086385d6d0eae5259f2f99cd6e307f57d5290aa66966c69fb517d502714d4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12017 Malicious code in oj-odcs-selector-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03e1915e461fd9e5e3cabf5ac88ddcb40add1449d47b7773f28d095c1473c23b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12000 Malicious code in maplibre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 812bdb7f3cb3a09a616e906c456e223c0069b42451a78c0df8d032054ec3f6a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11991 Malicious code in host-exploit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c88a475b723d108a1436e644b77f957b6c71df50e99efaabff655288073d99c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11974 Malicious code in ecpfs-react-data-driven-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8380a709c782f2024d272f1ff935fda6cc8d7258a5c46da5d6e86997cc1ccee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12011 Malicious code in nimiq-rewards-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d950995f06dd02bfab4e652ede8b9806d3cdd50d46d63c8f03da915e20a25da2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-sdk-for-java-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d80272d9c808f50bcde1ac09ec61a64d13c6151cb5ce8724af88330aaa8a0cb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12008 Malicious code in nerd4node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9212e7685c7fd13159cdd6b31f5c0b398be7266d6fcbab454def7f7d8fa1a781 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12036 Malicious code in secret-scanning-custom-notifications (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 327294aa7aee3dce9cc1b90296b239e83b00f5589a3613f7261f268283a575aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11955 Malicious code in client-mpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 104583f4b439c932e7387c37cb7abdc91c85df2d7b7825c23a2e354f348e1932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in payment-tx-params-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6861efcfa7f8e30a646e9a76387e80446245c2f7ce4966e55da1c8e6d34fcd9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11940 Malicious code in actions-languageservices (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6468057d6ae17756ec02b7293da5160697424f26a39e172bce32c38a2b2337b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in container-toolkit-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 495f1eeee43fdcdf2a5b5468befc8209a0d5d55f315464d80a9ae3d926a34da7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...