MAL-2025-4082 Malicious code in grammy-menu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 877553f9f9497ed8ae9c7207031e84315c467837dceb8b2d9b46eb2d5cc7a6ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-crypto-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cad7476ddf9290a5b4fa0e038b37e2133e0f5e5495e71bc825b1baf99d4e82f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in typescri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f04c3fc11a28f8c6d0deae7aa58501ba6e77e2641fac6e541e6ced55c8928c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4123 Malicious code in save-me-pls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e53a2d57a5536d00cc75b7aa3e95b8f8d3373bc6da94392bbc578843872d648 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4068 Malicious code in citiycar8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d87e712dc1c0996cce8cb52981fc335b35095dc76f79509a5d80741d31df0c42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slowingdown4u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f332e8f6680150c84aa7c785655341845220594fe64707a07857819503c466e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in human-readable-time-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c9a8186838a4df771f127895d5aee834c26caebf7c60379f604464fc1f33356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4104 Malicious code in module-dmall-discord.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d57f50d40effb7b9df9c15b7c206e22b3ffb792478ca1ee993e45c62fc4b40ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in module-dmall-discord.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d57f50d40effb7b9df9c15b7c206e22b3ffb792478ca1ee993e45c62fc4b40ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chains.web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 162ab39d32e8af255dcaad40e29e294e4849e4c76273631024ddb7cc9a4398c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3ether.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47c43f30f81b5d3f68b5ecf6eb616d11edffd82599089dca17c8ab9acca56ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4073 Malicious code in create-qr-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58919bf64984f8dcdd4ec2802325f47fd7ef1a21aa8f1cb4d9c64549054122bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scarce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a05097c7c77bf6e33475e2e38daf131934703a7c79c56548eb012316c01e7e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4133 Malicious code in spite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d198fd58550e91a2f8ac51c4280ed47c6d337e019d2069c1f6cb85a849be38f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in envjsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4aa332a40264890a2b2256972f5b88920d7bf693b89832d9b3b5e17561a5db8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in br2s-ui-common-utils-02 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50d87546caa948c8d15e1a997c9002ed36ae954510c72572cf4535474a70a0a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4069 Malicious code in com.meta.xr.sdk.avatars.sample.assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09a9d5a626622260968ebe26077b57efd3ec56b069d8808fe569f79523a7095a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gatsby-mars-pet-parent-journey--server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70efb29ad6f2b4da2940934e2b50c20f30c3798c9a7a20da6affc3479f343133 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4110 Malicious code in node-wavehttp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f86a00e28589e2a90709cc928ecf437d7df51dbe5685e8aa68dad43c7df6f77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @confluence-classic/confluence-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4ff87b5122db88c06524939b2121d0aa2b413227824f46f1813bbbcc3f19d78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...