MAL-2025-3835 Malicious code in lodashing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bc06ac67ed3a5e36a05578a4914e72c57833d27babdad196f17a54c1ebea3bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3836 Malicious code in lululemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b30dac91622fe4bf2b0b8efae85c2746a4bc8c4dc848d9ababf9fd31582dd9dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3850 Malicious code in passport-thecity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware defb7627134320679ac575b55c8a7ef1fa8d74d48f00766173f0214a95905c3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3793 Malicious code in mongoose-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3cfffa7f52f4e6d69ba4fc23ded09e40b630a939dac0ba79a7a72feb76aba11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3869 Malicious code in albatross-test2-module (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a452ae314d4752629c6c4f9009c4e7e65249f015e18a4caf86ed8de23e26bc43 Any computer that has this package installed or running should be considered...

MAL-2025-3699 Malicious code in toast-sliders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25ae6ce1ee1c2577412de84246fe478a882ff928536906b59094154cf15b767e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3615 Malicious code in beautifulsoup4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48b598862c9e9e3771899aef5867eeef964cb09467b70154f6e5824d27b683f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in socket-event-trigger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84c96a1eba1263914947232b5710b1f74986be68b124fefcbd733643ddd31c47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3489 Malicious code in eslint-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88ee5c779a1b0197babcfad8403ebce7dfa723926adacc82082335254338d7a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3297 Malicious code in keypair-encryptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c02f1145632762977fc8763c9f6ee3f5c9272b45196357654217a1bc1ce13bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3260 Malicious code in kernelcon-bad-packagexp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b23dcd407de61faa602b2eaaa097be5383c16cc1c62b28c707bd050dd46a1720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3249 Malicious code in featureapp-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00e9ff6ce07bb821d31987961d61536cdf469ba2c6f3f7a1861f96c402a900de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3218 Malicious code in element-ui-locale-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5fceb0684e44fef543d79d4744dc2a8e652e74219d8ef07c317f2d3f1c40dc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3207 Malicious code in empty-validator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1a8bb775434b7294e63fe4542d85b6382e1dd38f2eef5a4db17f73eb7a8154d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3157 Malicious code in moment-encryption (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff1ffe845cd41861606d3dc20d843dbe68a99b2db1e87c2e012b8a804a78c494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zhilian-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ec576642e5bf8ec161e2f79362ec779bf0fc68660c3bd28136bf39f317b9341 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3152 Malicious code in goodluckforu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5854033dc24355896c6c0234a43876ea5cc4b241157df788bec8a3186a995a7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3083 Malicious code in servicecore-response-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efae7348c792464442a5508d7cd2907cd55c01835e4cc188b1e078b1b96beadc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2751 Malicious code in degate.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61da5754c936114c5ca17e69053e009e5977b17f1dcda28c83ab085d40b17811 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2744 Malicious code in @takamol/qiwa-remote-visuals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 802d5f4560d93b6b3fa360d464ed104594df64ebb3f5b38ec8eb0b37385c80dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...