Malicious code in csmagnifier-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a41b68567cf24680e7cbca7353ab826a7c2aaf25438fa38f0d0187d61d34d0bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cscount-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11a586cf9af033069bb8c5123c27f5256d0465223f1525db391bbddde56a6f88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1098 Malicious code in cscropper-vue32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c632c2c22e753b9e5c7863e34fdee21f2cfc0a4e963540faa7314ba899dee79a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1174 Malicious code in setan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eef3fa99fd3e4d15ed2b08d2e78ace1c63c6582e8af5be6dc244ab00d1e36f8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in argus3-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73ab56cb9a768521f617a9a164f47af13ad0d91027ac9f172b9fd5c8b9835d45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1125 Malicious code in gateway-hsm-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0749bb94e6b7e493b7f25152e4ebfc6d99b6e4e59fe32b075860382d66089417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in overture2osmjs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4757db7655e3de9ca7fa7343ca0d8cd59c899c46454ca659ff07261b884f64db Any computer that has this package installed or running should be considered...

Malicious code in telegram-util (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 259b69f583bb3ea0fcb76890f5361a9c8e9d784fcca352a51f4dd13e7d73e1c7 Any computer that has this package installed or...

Malicious code in monaco-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee69dd8c6692848ff6eb6a9a1ed9dc881a6790a2eb02b4942215ee914d5a77da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ig-grunt-maven-multi-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ba822293906e2a34cd29d237818bee0b19bbafb28ea1600c9592ac2554d8501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-scality (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 315c3576289454d26857298b5dd200578c8f7002ae98ec2a45a9d51ec1f8438d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-336 Malicious code in groots645-npm-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 485143431e0e6dedf1f5c505cab6f34754b74c59b37948e1aa765d265a351c4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-319 Malicious code in webpack-inline-constant-exports-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb8ae870fad74826ac57af33f27bdbe9e74f667ec62aac01b5c9e55a47d36001 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-301 Malicious code in popup-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf12287bc6bc8081a72eebd8ef2caea2807d4875c6a3a4f65648d9e61125ef4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-269 Malicious code in aem-react-editable-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fdeb2ad3adadbbe85aa33bbaa3ed1728c9019c415d8c1e218db5f1f72661482 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-282 Malicious code in calypso-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30b449bf6f8392b5520e508efa7924fc5e7561b8df1c6dda4e09db65693f2bc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-279 Malicious code in calypso-color-schemes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f99641bd891e5d4efbb233820890cd050e68eb6a5e71c23609dd1a1ed888254 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-177 Malicious code in dbprivatekey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c73ecb3b4cea936607074ea606da153ea262e2a30aa18950ab2565f350cb6e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-237 Malicious code in scrumretro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 322bb93a5561d27c4a0ae6e7b7615cc7a14dc59abd5d4426bf0ca07b5c71c181 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-218 Malicious code in plib-ai-chat-response (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bb6968faa9c60fde77ecfd7899ac822b379eb1a2e677efb8b2cffb55c94c95f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...