Malicious code in basic-validator-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a065e2ce3dcaa4245e9bd8873e7878385dbe7a3fe9aa7276ae5ac89686209889 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chunk-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d38a27025a3781b68d85bf387d877d8eae3d40bb6bc19c9edf52dc069d47773 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47186 Malicious code in jsonstylizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 085d3b8a0491210bdcc534a63cbf29b4342b14a727d38e4bea0c8fae2f747dd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47185 Malicious code in jnscript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 061c827dba1805eb29a15f2ecb9cc870bbc52edca26282a7a42d392de950ef42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jnscript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 061c827dba1805eb29a15f2ecb9cc870bbc52edca26282a7a42d392de950ef42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v320 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 204ed31fa77ee7b2a41f972ca8834f0cb6e4912b1155723e364227e15df8ce6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 068e1bc120532c54da96dabb589d8d274223c9b1df16cc5aa698eed0def69145 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @huobi-lib/vulcan-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19abe7ab9afcd189bbbd5061add8629d1f576b8dae3944cc7974b7581ffbd570 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47188 Malicious code in lovable-cookies-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2866fddcd00a7e51784a043c672960b21264ee2449d71b72d5382f7ab14050b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47107 Malicious code in vite-plugin-uni-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ff6cfac329bcb3bc726e87d12942ec29cd686c4d4e81223398ed26948b46e39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26f59edc4a049e09b7c58781c9ec1b0e28038561905195af89d655fedcd5b14a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47106 Malicious code in vite-plugin-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26f59edc4a049e09b7c58781c9ec1b0e28038561905195af89d655fedcd5b14a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47096 Malicious code in graphchain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f74a555cfba6dedc51a937d8cf8c843437538581dea703284d1e872317263f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47100 Malicious code in polkadot-apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59092b31b08f13b01c42d1e03ec24bdaf044459cc73c90f1ac4c458dbb5817a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in polkadot-apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59092b31b08f13b01c42d1e03ec24bdaf044459cc73c90f1ac4c458dbb5817a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47102 Malicious code in react-dropzone-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cfc9e996c0ff6970713abc0d1870a3982db5ed09547644a140c8160a8a393d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47104 Malicious code in tailwind-classname-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 778af8e6403754b5650e5c08f6d16458ed8399f7cb2886350369e04ac242e07f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47085 Malicious code in secured-ssh (npm)

The package secured-ssh was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2646cfd359028f95d25b02993d148c26f9a4f910b6ee2b382f6e5a38e30ca9a0 Any computer that has this package installed or running should be considered fully...

MAL-2025-47029 Malicious code in @google_cloud/precise-date (npm)

The package @googlecloud/precise-date was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe210b8cac7607562aceba7accb395f7d72480112abadec2545c8863f9029ac Any computer that has this package installed or running should be considered...

Malicious code in @jsonjoy-com/base64 (npm)

The package @jsonjoy-com/base64 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da3501193ea6192ce6e4a5ea194eb4cfd31e27c85d274023f53ef6c5efde39a Any computer that has this package installed or running should be considered fully...