Malicious code in bsamba (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbd80a32e0db7567c4cdb3ae72a88e248bebdf428ab9979e0c7ed4456a4399f3 Any computer that has this package installed or running should be considered...

MAL-2025-4764 Malicious code in sechub-web-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f65f37c0cf500f985994b4ab4d2cc764e8072e70cc17aab91987e239129fa93 Any computer that has this package installed or running should be considered...

MAL-2025-4652 Malicious code in phlib-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a4915ab271cda053c8653639ad5f83905fae202cf8b9fbe4123e86db9b87911 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4742 Malicious code in esm-imports (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc52bdabe3327881632cbbe5a3f608dd1043fa904709057610afadbbf9e40637 Any computer that has this package installed or running should be considered...

MAL-2025-4643 Malicious code in frontegg-angular-sanity-check (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85f18cbdaf7836cc4a267525da5ee029eb20efcf6f1ef0e2208a62448a14ef8f Any computer that has this package installed or running should be considered...

MAL-2025-4471 Malicious code in athira-windows-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd39f8b3ce4727e8aff369ad5c9f43fab1e5e99643c24cc5aede40077c80e59e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4486 Malicious code in interview-coder-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7544d4b6f6bedbc4b2c443dea83d3edf5047cfe7335e138c3060870e7921374d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ideals-ui-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab4816f617c76fa25d8130b9f4db4d16b0e8929fdf625916b1b91c25eb920b2 Any computer that has this package installed or running should be considered...

MAL-2025-4459 Malicious code in winston-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c1ddd08c3507f29d71429f8b0ef2c9b946669f9eab8edfb1e739101e01e2bb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4366 Malicious code in koishi-plugin-majjan-nanikiri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6887f78c1033e92ccb5aab19fb7c9403c34d9136624def09f8944b43603dfdeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @demoability/loadgen-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77bc624f36bdc284db27e9759ccf30fab22108a753042ccbd6a575fc26f90b79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4326 Malicious code in com.unity.xr-line-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 688c31fe545231e784aa21aa3349d80f9a04b02f893a52510f1be2216609f80f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4283 Malicious code in random-dupa-test-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99f5f604116e448aa422338fa8d271809af42a57332bbff2963599c372b0ab01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4096 Malicious code in lol-ninegacha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 332626b1c4ee5d04b9cf7d47646efa1f37df2e108866df823ccf410a9026d869 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4130 Malicious code in selfbott-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 860baf78f0f4f83405dc224345b0d30845128219a809a6e76e89c17493419fda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rpc-selfbot-v10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac2e07d59eef832d8c3e404342ed24b2b1e0c1e99b6f2807d004c5ae6e85ee84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4052 Malicious code in hashcrypt265 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ed2e7d3a679ee09744c353542b2a412a7dd42d27c1a3f97e8d6d266eb409b92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4012 Malicious code in node-validator-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2e959ea4d60fa68cfd23f7e2fee922a263bcdfbee4e19662eca073135680b91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3911 Malicious code in npm-scrapper-faris (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ff29440d7ea5c240dc8376e18b662318b42eee0fdcdf7aa00c931bb46371416 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3917 Malicious code in solana-crypto-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb0ae4278aeded272c00f7218890bedf1e2e9dc77d03348eb4a1afe7fa277e83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...