Malicious code in slimdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2f226420f343b927fbc14d4e38eba517fc139753e2d5a7006cc0a251cdc8b0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3652 Malicious code in vim-refactor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b68d05cbbe21dcfb11bb65a968508b32daf65b9e59fd898e3ee64f54c67de6c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3630 Malicious code in jetty-quic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6783fdd256b0751111ed64602f70d8d479e0bf3dd233363fb9667f7b8567d438 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3653 Malicious code in vite-plugin-node-modules-polyfills (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba225e7480a310032d62d6de3db636b57a0bb3e2594bf99605df20b09352eab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3682 Malicious code in feather-provider-filter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c10e095a2bc88b96e5a1f9fabb7eefe0ff0596b0e3b3bf085fdcf95165c4689 Any computer that has this package installed or running should be considered...

MAL-2025-3974 Malicious code in wegenenverkeer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 208aef56bca72858ba42a6a6f8e100ba7b9cbf696d45876b6797afb8b6d6ac27 Any computer that has this package installed or running should be considered...

MAL-2025-3708 Malicious code in buidl-wallet-contracts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b5221b4cdc1f6532fbece9f61c742fbfdd72e88d8fc1d5ed8c9dcae92157e8 Any computer that has this package installed or running should be considered...

MAL-2025-3606 Malicious code in adobe-commerce-magento (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd6d37a2366d35f3960bd44382c3af4b61fa4ef998f6983dc7cd8bbe7dab3f78 Any computer that has this package installed or running should be considered...

MAL-2025-3714 Malicious code in crisp-import-conversations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 695e694069b00b1d669921e34a38537e57d625a52cebab80f5ae8af1221b8377 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3592 Malicious code in wasitestforeducation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3143ff548280d35ca2611e7959f1e56224da26b7b8a56ce97c67509800fba81a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3531 Malicious code in nsemea-alias-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a6452557c7bf4d2ec5fa907c2a427e3ee1cdff756a76f9d2369a64a48e239d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3517 Malicious code in @baywa-re-lusy/nsemea-salestransaction-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9605e1f17bd8907425f5176a55ff40f7f9ffc6c94912d17c753f3fdb34361caf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3485 Malicious code in @zener-soft-consulting/ab-webcomponents-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d973a87cc8f873fc6982e52eddeed55981da33922a816ca69bcae20b076524db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dowload_ebok_tragic_design_by_jonathan_shariat_cynthia_savard_saucier_0jkyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4df41f6df1da311b66bb02e6bd7ede493b44f3746f30acbad2c3dfd7403166ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3696 Malicious code in poc-npm-hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c566d52416b7be560224ad7d3f57924013882a6ee87a79754da4ba6f174c2106 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3271 Malicious code in node-json-converter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ffbaad687f777a1680340dedffa3333cb8f4e0ada8e0a886e7f798a9a59ee2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3263 Malicious code in task-bots (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be184e51a3aa435812d643ea00fe1f17effc4e16bb86a0b71882fb61f69573fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3247 Malicious code in fatfingers-helloo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 473958a91938ac87fe7925feadb207cc144a2e7e1d9cfe7f13029190825091e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a857cdec809c53bf25c1227ddbd8321b2d64ff54fb9963377b146116012d1e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3225 Malicious code in @harvest-finance/harvest-strategy-arbitrum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062f2e97a3824c2a6e95152cfe109cfeaa5426a6153438aad07eabee03820ba3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...