MAL-2025-47223 Malicious code in @things-factory/integration-base (npm)

Suspicious postinstall script executing bundle.js, which contains excessive unsigned bitwise math, indicating potential malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6b2496d9a593750ea26a4cea41022e9b78c9bae1ac1b398aa506868e90e794e Any computer...

MAL-2025-47222 Malicious code in @things-factory/env (npm)

Suspicious postinstall script executing bundle.js and YARA rule match on bundle.js indicate potential malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88b8463d9fb16ac5faed1cd122997c683cc79534786bcf816139cefc13897168 Any computer that has this...

Malicious code in @things-factory/email-base (npm)

Suspicious postinstall script executes bundle.js which contains code flagged by YARA rule unsignedbitwisemathexcess, indicating malware. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cdc3773013abc63a59090ab3b457bc1e047f7a294edd5f35e6ce43840fc0520 Any computer tha...

MAL-2025-47360 Malicious code in verror-extra (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a93fdd891eeff42ebf7abff1e7a6a00febbc8420ef4bef6c613ef250f4f3ca3 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47328 Malicious code in monorepo-next (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f0c8e880c0edcdf1ac8b55ac831ee123c7bbd6b338a44a77a49400b60985d16 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47311 Malicious code in ember-velcro (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb2c22cbb7ab559c0ac1e61418ae224e561beacb9571166240b4c5249a098dbb Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47309 Malicious code in ember-headless-table (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8491adc45c6eb6f720f334d2cdffde36b6b9fa31dc8ee3d69fb8aa92611fa2a Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47308 Malicious code in ember-headless-form-yup (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed8ff319c2845a41812ca372e9a7e36c894cd5027bfadab1381fefb8892e4074 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in browser-webdriver-downloader (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01fb714365440560815380bba71421a48f96fcc47b83487acaaa72a1410c0ab5 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47217 Malicious code in @crowdstrike/logscale-file-editor (npm)

Suspicious postinstall script executing bundle.js and YARA rule match for excessive bitwise math indicate likely malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c0f2b92ed507c0c5be3665db16bf307e19440b594539d07854669c027545b6c Any computer that ha...

Malicious code in @crowdstrike/logscale-dashboard (npm)

Suspicious postinstall script executing bundle.js and unsignedbitwisemathexcess YARA rule match indicate malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f7539ca83a2878a7b5b892aaa154843f462994bef40d9d14698dd04a2f0ffee Any computer that has this...

MAL-2025-47321 Malicious code in keithowan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e907b68179fa9c3d3d6cbb97df4bfd9ca6cc4f833affd757ae94b58c1a7d65c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zarabotok-na-obmenakh-bitkoinakh-d7rqlq46s (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47355f63c693d1d5d45df79f7b39eb6971b2643d2413ddf90d090ed6ba38f67b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aktsii-gazproma-kupit-fizicheskomu-yxpir9hpn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ea6352db0bfc4f9d8a636697331c16dc4bdf6835770a024a1abb309c9dd9e90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @openzeppelin-compact/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9559f883ef8ce66f28f6c6f0e338ec3c10d5ba28c0e2dd2c7133f5268f7e539f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openzeppelin-compact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e764dc15f07658164fb682663adc912360ef9936123f3b8738c9ed5614170765 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-guest-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1517cef9707e50e928c86d5810217ee40f807230a72a4bb77e6b2176fd33ebf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-jito (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf71580a117fc1eb648238b8dbf5e2919978bc9bb694df76ef5b844542839736 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ve-editor (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ec4086ebb27a8d951ab4938b0af8fc4229706d75429b6a199556436060ddf14 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in tg-redbird (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 381bdac7467e1d835aecf58e3cfebc472a5db3afa8109ad93f30ff7f6e020e09 Any computer that has this package installed or running should be considered fully compromised. All...