MAL-2025-4600 Malicious code in odin-security1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d86b20d8160d57b785f74b9bba211706cb3432a2060da273c1b876e3d2cfa39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4593 Malicious code in @mpsemea/fspay-smartpay-logging-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 743df569bb531a07b7075f6ce9780c5ce5d7f6276d932c99d1374f31d5ec042c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4586 Malicious code in env-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 105ae811c2409aa9875948339815f7f362e64e01e0c82342286fba8de426878f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in athira-windows-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd39f8b3ce4727e8aff369ad5c9f43fab1e5e99643c24cc5aede40077c80e59e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skinnyvans-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78bb320c57a11fc61b5db53653bf51fb93b078e579dcfae939e15a6749c139aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4502 Malicious code in skinnyvans (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4d7d1afb0bbd6fed02c341b71eba019f92f582433d971e6538b5693d9d026e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4507 Malicious code in skinnyvans-windows-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8e75c36e408e17166850d6ffed1c9bdb3d2b87358aa9aecbe72e660be6014a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4489 Malicious code in microbundle-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee7eca742d3841aad55bd259950b4c33702da5c8bf94becda043530ff8ddebd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4525 Malicious code in zeal-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b52d172cdcd738359992982c891dc3da3b7c4403d5cb3cb4fc4eb1650113d3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4518 Malicious code in vite-plugin-style-svg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a088c782de4d11381b6ebcd1c8b473f9d44157fc43c0e1cf01d289370f67c1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4474 Malicious code in blur-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1679003578817df182a4bac6670c2bf5d42f7fd4189d6ef78bc81206827d1b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4482 Malicious code in ideals-theming (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b76e002c6ea57373962d0b94a4186cd64f4de50ff591d923b550f96f25aa7fa Any computer that has this package installed or running should be considered...

MAL-2025-4523 Malicious code in wrapper6 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 140a14258e5028ff6bb7a9fd20b73655263c97ed3f7039d184f6f94f2c776121 Any computer that has this package installed or running should be considered...

MAL-2025-4484 Malicious code in ideals-ui-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab4816f617c76fa25d8130b9f4db4d16b0e8929fdf625916b1b91c25eb920b2 Any computer that has this package installed or running should be considered...

MAL-2025-4563 Malicious code in inter-dc-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3519842408c6f836557f6b1b522e6af8e3727479c1ccbbf5bbc1a9537cfb4e44 Any computer that has this package installed or running should be considered...

MAL-2025-4449 Malicious code in rainbowkit-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83ed1e8adb99f97a9039322cfdd84d79db451f0945c567837f21ecb05d6fc49b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in etherna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 878da0ca7dbd6a63e9de7b962c0012e3ca24afca42be819c3b86af0600939fe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vnc-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b409d2b1ea3535147d71ddf23425fe3fe4d437ce0d5af96f32f80c094bccc009 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4422 Malicious code in hpglobaldata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 459cca0394666da81c2e6b2f659b91902693b72fd5e18fc6ca3e08347197e941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4420 Malicious code in zzr-react-custom-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cc679d3328b5509a2417ca20a366fb8e1113772f0f3e39a99e6fb2faab531cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...