MAL-2025-5892 Malicious code in apple-keto-acv-gummies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3431204b738da9726bd553e79f2bdb59fcc81bbb87b633b959947a1d24675da7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5898 Malicious code in blue-einsteinium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d29bce29ab50051cea7b565e77089c60c66a34ba8f074b85f8e835a25e8c7f49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6192 Malicious code in paypal-invoicing (npm)

Malicious package. Collects system info, exfiltrates data to hardcoded IP, runs code during preinstall, and attempts to hide activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd66aabb4b40f49dc7ef8bda42a33f705beb6def65601b8fd3025c7e055bc2e6 Any computer that...

MAL-2025-5961 Malicious code in telegram-pk-auto-sender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0440cb1173d59d4994a01cb91522080aef6f9ce7987bcf54f32ebf0ae8a3581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5973 Malicious code in web3js-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96a262a05712b8db4ab5089f2e93098544cbe69efb3e8cd90b4cb67c1c9e04a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-lightparse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2be62813ca93fa71037568bc538e2ac083ad48faf1e5d0f362c4847d0f8a1b39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-base-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8582e0acc5f7199f1f7af95aaad0689d758cd9b4cd7110c3d2291ff6751eb5da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5960 Malicious code in tailwind-config-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6be9b05ac20a95e479566e244cf4bea92aa77281b365a4deea26727c50e08597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5968 Malicious code in vite-proc-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 097cf8f610d9121155696133687f0e50aa33c0716a29bb7fb0ebca8254f84e09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5966 Malicious code in vite-log-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae891068161d7e6889e4a12faa8fad3699025e42e4ed3f317e50f0506d517a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-log-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae891068161d7e6889e4a12faa8fad3699025e42e4ed3f317e50f0506d517a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in proc-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3789e8e4aa2cd220d264340ceccd11c9e9e8b6d5e35c4ad402303a54500a105c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ai-audio-descriptions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebf35a4094455afefae874d2367ecf96babc419a5ff8c0474f68beea08f3177b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dt-retag-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d21deb5c26c8d9b0043ce26b0fe5ec1625607ab1e1c37102589f92ab7187364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scenes-ml-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c945347ba764d47a25e4a06c08fc0562576992fecb23b25905113a20289f0be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5929 Malicious code in jsonloggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d54b4c8a926e93beec48e7aeb67936e9095d34e48f015fc167af0fa33e11574e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5896 Malicious code in azios.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f13743f8abbcc019c216daab17db9859fa997c1e9db567e6f39ac8240e89f91e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wrb3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d88ef4850c22d9aecb5ddb11ae54339766a852526d80394aea04b92d91aaf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in acios.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 966461f7d916cecefddde93c1d93350b9f0fe50ed0e2505b1be424e48512da15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in asios.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9de41cd145f6fc73566a02847dc79c1f7237e2aa159ac104f24fed3b920ea24b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...