Malicious code in safe-react-components (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb053fb51230ded6b594cc92293d5377c31b4b9fd8d47e14e46d824d7e672910 Any computer that has this package install...

Malicious code in 029testnpm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c53f058112a7baff97a58e812ac2d9aa74068e78b410609b2834e6d1a4f16ea7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1 Malicious code in 029testnpm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c53f058112a7baff97a58e812ac2d9aa74068e78b410609b2834e6d1a4f16ea7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-42173

Name of the Vulnerable Software and Affected Versions nvidia-graphics-drivers nvidia-graphics-drivers-legacy-390xx nvidia-graphics-drivers-tesla-418 nvidia-graphics-drivers-tesla-470 nvidia-graphics-drivers-tesla-535 nvidia-open-gpu-kernel-modules Description The description does not provide...

Malicious code in mx-exchange-docs (npm)

This package exfils sensitive data to a attacker-controlled domain via index.js. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86097f31b903420b95d8b161339744186e28bf4894231a435e0889e51ef07a8e Any computer that has this package installed or running should be...

Malicious code in valid-package (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccad71901dd807f11aedc2ca2f34c92319f90ccbf3fea758a765c78eb2ff6bdb Any computer that has this package install...

Malicious code in bcoin-full (npm)

This package exfils sensitive data to a attacker-controlled domain via index.js. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 461f982127682ae24a143dec087c7d0d27c8c37ec4f549d4037e996508f66981 Any computer that has this package installed or running should be...

Malicious code in @swiggy-private/aatm-nirbhar-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70df19b8ede6dfbed873f31e07221613884de772be25ee350a1115a2c544bc46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12167 Malicious code in @swiggy-private/dls-web-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 866e9fd01cfe3133ef1ad9f34a13b577f9296d283c389de22605e996c5ff2de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypto-buddies (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87bd38c4e59327027fe55c21e59d50ddf6e0ecd5c9a488ed53932639fa8927fb Any computer that has this package install...

Malicious code in plugin-sitemap-coveo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8beb57037c74f45d85a7de2e8df9f414b56d2cece15a8004db4ebda4d5400ff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in do-not-install-this-plz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adc3e11ee2ba7ba338bcea114510c201b2b2f788a4d1bb7d938a3c823353772c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12143 Malicious code in data-strategy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cfbe801663c651296948ac9f501212d0f2dc63804b79fbbfbbd0534f2468018 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in comparison-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d49c4851777ec7b5751332a47e71dbb222937e6cc24c1d9cf1808cd989ce800 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12154 Malicious code in onyx-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8be30b3e9e3e3e0c2d877dd6ab516a128433859782e8b798a2f9f095662ca6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12146 Malicious code in docu-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6622a889906180340028e70850543b9d34f93618e7dee954ad8d394aa5c86be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-spring-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4479151acbc242dd9b62ac68197121a3b973d6eb0b58d6a0ac6900f63b9fe1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tree-sitter-dockerfile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 345b2afbf518dc7083621e0f9fb5e7e8b109a319cc7aec619f17c7aa9b18deca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in precompiled-wasabi100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f3f008b27c846a21dc6b847a1e4a2f4f705d51e81983df2c63a7ef6484a365 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lerna-monorepo2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 271f42aae85ac8961f1f78e8a64fb0a39eccde9c8d632a30fb8c1e03968d6d51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...