Malicious code in bookingcom-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da4d630a63a612636008973224503694babc038514b8db52fe4e5bc3edea004c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in collapsible-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a424d4fcd62d35f9e9da962931dbc5fd39e9bfc3b4744a5f00c5e442b2ddb36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in no-style-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9044d80b8ff33b0d2a50511386c0fed003004f9452211938b949aca211b0866 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-365 Malicious code in testidneel-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2d741fc56c242ce7ac9590ccfe8a91cb20e28e9e9a3fdc9ac721258723cc082 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testyyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82bc94189a84151717881b2111100b84166cfede990cd122a895d3f2316508d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-331 Malicious code in another-depconf-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6876487b755ba50effc916826fdb407f0f653893569fef933deb61a21a8d6626 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in another-depconf-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6876487b755ba50effc916826fdb407f0f653893569fef933deb61a21a8d6626 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in groots645-npm-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 485143431e0e6dedf1f5c505cab6f34754b74c59b37948e1aa765d265a351c4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-336 Malicious code in groots645-npm-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 485143431e0e6dedf1f5c505cab6f34754b74c59b37948e1aa765d265a351c4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 1password-sdk-exapmles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98366c77213b87d7622472828c95aa7590386458d140ad0a0b31a86afde5b6ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-328 Malicious code in adblock-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12430deae73d0c3ce495467b184a563ddc99e6301ab6f2c7a45445d917a78875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-337 Malicious code in legacy_vis_analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28ff9d6e37ea3e8b2d1b4748cd469a912ac50750610b909bfcf67f1fdc42e720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in libcrypt-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 986987a3ac2062033ac84907b4be4febb72b7c5e89c511e691bbac561f7045b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7221-1 linux-oem-6.11 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystem: - Bluetooth drivers; CVE-2024-53238, CVE-2024-56757...

USN-7221-1: Linux kernel (OEM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystem: - Bluetooth drivers; CVE-2024-53238, CVE-2024-56757...

Malicious code in fast-utilz (npm)

This package downloads a second stage payload via Discord. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e23b4a6118c13cf6e7d7bc0318d4ff3f1d25bbc1cb4db2a8a4676cdb4777e232 Any computer that has this package installed or running should be considered fully compromised...

Malicious code in ethweb-set (npm)

This package exfiltrates cryptocurrency wallet files to an attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7af171b00090d3b3bfefae279da101b5da3a93390bc9f2cce869bdbc8685cbf Any computer that has this package installed or running should be...

Malicious code in sdk-coin-avaxp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ee94cfa5a5aa6b22e135137520e3b26398c9d013a5405d3240f7b3948507005 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-318 Malicious code in webpack-extensive-lodash-replacement-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 845800d2390e86cf58dcd05fd029a2ff2a064fef8ec1bc60b2ad041467db4fdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-320 Malicious code in wp-babel-makepot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d331165ce76baeaab9aa529ff1ad7c5ee9ce1f76032d4ea0db72ca744a2a0f76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...