MAL-2025-3806 Malicious code in @hotmart-org-ca/cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4248adb5119119c8a93c3615e413df74e456739391ebff8e89f978a212a0659 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3847 Malicious code in old-react-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0ae29d9cb582d5c0be810adbab5c88a3409a65d0d94034301910bb1c735e2c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3824 Malicious code in custom-social-connections (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63d17fbe69636024ad8599ea6675d12b5c1473dcee490a3f63f3bc80a0ad7f60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in baby-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 598fa750ced56976e16940829f016c95ce72e423a41d8875aef222ea1b85e54b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3820 Malicious code in baby-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 598fa750ced56976e16940829f016c95ce72e423a41d8875aef222ea1b85e54b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @equis/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7017af11f786172b41ddbe4efe5d6f38373a9146c8b1fca39e212ed6403f8720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in debug-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7992e77dae460e67006b91901d6a8a97662132bfd0b34c9fe0b6ab9d0e6ed4e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nayan-imgur-upload-apis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83086119743263f9bdf6c297c723c4435596eb345ae1346780b6cb9c49e0e597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3842 Malicious code in nayan-apis-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29f6aa37009fdc9a41baec1f7003012ff794de3dc17eaae4aa1c50aadba83bd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in abir-dl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43a97ea2900bc67d022048b8bdcac52eeef776fb29fad42327fa1ceea2be6a1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o1js-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9235ed25ae95d4286d7a3d5379bd815865a81ccbbf126851fcc04271ec639987 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in f0-flow-resolver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c42aceb0889ce5fb0fad4c698354a5a1df80d9432c36717c49a273f233cc9cf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3791 Malicious code in keypair-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dba96628edf26ee562bf2ef714531b6dbcd101c8a997a95d3fa94673be4754c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-logging-patcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 704430ee3cb7da0b6e3eb0d7736f061b92391ab9b42f45be36bb3b6c68a16f31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-cli-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ddac203965243a9f1a0fac7e0e5e5217dec4667917b4d23c3dc0e7780d3176 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-event-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ace3ab879582927c692b2b5cc3006afb79d6853935e6feb933e544a35260ed2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3795 Malicious code in next-auths (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecde41ba618c37507cba3ce0adf9fec9c17438fd3abbdcf1649d69d24ad38d01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3797 Malicious code in node-event-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ace3ab879582927c692b2b5cc3006afb79d6853935e6feb933e544a35260ed2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3789 Malicious code in aiide-cur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f87105b04445846be4b509793882c19f03cc302b5a62c868a7f5bc603d6ca1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Alibaba Cloud Linux 3 : 0087: librepo (ALINUX3-SA-2021:0087)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2021:0087 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-14352: A flaw was found in librepo in...