MAL-2025-49049 Malicious code in transform-react-constant-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d582d56f1f42a97702c2557fbfdcc90613da53d18adf5494b4f18c555c04398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49007 Malicious code in ft-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c048d30efedaea5fdd0efeaa12f5ac0fc2498a9a3ff8698af6c96566e5542825 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iot-cardboard-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55bbfa86675a8cd534e3602af7ba1fb1f55c45cf15c8090af9ef87542d107c2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49039 Malicious code in rxjs-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3493cee8ab4bb7f4b656ed430193cea7d26bd53c7c124c9eeda99cf31ef7f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in annotate-pure-calls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a9cdca3a9ab53743de2a24b78ebb758510f58ed74ba54d5f727dcfdb17e317 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48973 Malicious code in add-shopify-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1579017bcad4a58a19270bb608486143fce58d13b9376d146e49b28bcb8e55f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48984 Malicious code in annotate-pure-calls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a9cdca3a9ab53743de2a24b78ebb758510f58ed74ba54d5f727dcfdb17e317 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49016 Malicious code in jsx-a11y (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69d8158b553a773a363a5a4bbce1477f430fae7a45c29fe8f1855401337f4b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in preferred-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 396bab0fa7cecdca5d48dbc0d08d0880fe906ca87841fd7eacfd43c8fb409d00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49024 Malicious code in named-asset-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41aa2c9de0b9bf1fc5a9cbee9d0442255a36d349e4645660908d01b2ac8db820 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49013 Malicious code in jest-hoist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20b09510a5986b0d378b1a5d9f7c081cd5d2bb67ad05f55090240bb0e976729e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49034 Malicious code in preferred-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 396bab0fa7cecdca5d48dbc0d08d0880fe906ca87841fd7eacfd43c8fb409d00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mocha-no-only (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a971050887c1e418b671aa4d56069074d05492afbcda3a8dedad2f09eb02d78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49001 Malicious code in external-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e93035f9471f41f1d28b532573b50bd3f0b5e086d74bc0fbd27e364169d71549 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xdater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b641058c31a73a57e1f88b0d8530757deb8d58bb5cab44d8d6804838e51ad66e The package xdater was found to contain malicious code. Source: ghsa-malware 352b4b106eecd6bc552fbe402da0fc80f976f9c06608453792e9b1c33a1836ff Any...

MAL-2025-48951 Malicious code in xdater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b641058c31a73a57e1f88b0d8530757deb8d58bb5cab44d8d6804838e51ad66e The package xdater was found to contain malicious code. Source: ghsa-malware 352b4b106eecd6bc552fbe402da0fc80f976f9c06608453792e9b1c33a1836ff Any...

Malicious code in four-sdk-aes-ipheriv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d8d19d191eddc67d0a2a9f1987b679d130fc16751d12748f1412508aa114dd The package four-sdk-aes-ipheriv was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48936 Malicious code in tailwind-merge-setting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55691eae5f6f66a311844f34bbdd053f7d35afb774e5827ca2cd514ef9714ae The package tailwind-merge-setting was found to contain malicious code. Source: ghsa-malware...

Malicious code in @jameson777/mytest4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781112b2d078b0c465848b5c8e47b6da47abcaadfa2b57b4852d441598eec400 The package @jameson777/mytest4 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48919 Malicious code in @jameson777/mytest5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfcd1d23e28023307b1ce65b03a678a6b989b630795691e92b2d0a1fc7c7f99 The package @jameson777/mytest5 was found to contain malicious code. Source: ghsa-malware...