MAL-2025-1407 Malicious code in coinw-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c0c6baa45c1fd069597025a6670638c1d4bff2a901b784e80e27896ce62b2fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1368 Malicious code in node-tg-bot-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa25c03f22731cf537fcef307f4a17c8cde7f9e55ec3fbd4e39168cb337ceccd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mexc-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29d69b3c891155b693e55fbc8734237edcf681cab20168d998375ea5ebdf2de5 Any computer that has this package install...

MAL-2025-1251 Malicious code in kvpair_db_upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6b88b2e00c8a0ffafc2f6be3ce66829c68d57693b4d88546a26344e712be0f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v185 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8939bc2acda7e18713b6ff48ec41b70f18201a851beeabecd0e544cfe80430c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1181 Malicious code in ton-payment-channels-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9e7497de28b982ff9a30a2d494d34eca9c190bba81a330f16ca8cdf7955e20e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-599 Malicious code in waltz-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0733a6b2b4540bd79978ea53387244384311fc91be38bff9344132f8aeec77ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bookingcom-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 286ccc5f43952c4b8eca7845eb43d1934d6571300be804977b475e075ef680cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-291 Malicious code in design-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7a60ac481f3005406c24eaaf2970a7d6d349201ce49fed87277a9436b52bddc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-286 Malicious code in calypso-url (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5b5a2d30d2c6e627b6a87db65706fe53bcc14fbe8d756ebe38893257bf23b01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opensea-developer-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 692ba66619407967d692be9c0e70b5b297806cf1e398766ee1556657af6feba1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dds-js-devkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e0db7ac7daeb916d2610c7e857e635a24cecf8264c32d39366fc297fcda631d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12145 Malicious code in do-not-install-this-plz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adc3e11ee2ba7ba338bcea114510c201b2b2f788a4d1bb7d938a3c823353772c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nayan-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed14882788a195f53ca2f8fd7b9fbb85b2b2c9bafc04ef3f08b3cff3f6287e23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elk1yf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 471b28d9ba2a82d14b4dc81f5a18c4cbce414ac60e2f843c8023da9b01b639bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in down-lo-ad-now-zip-mp3-93-million-miles-psw9n-wbuosp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e295ce88bfef86cd2239d3da7b9b7fce917b7d4a2e74b0db1990ea9a7bf4f7fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethers-aaa (npm)

The package contains additional code to exfiltrate user private keys to an attack-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 268e60b27602a9e78702588325e96f875b3d37da5815147256c8becfd3d97270 Any computer that has this package installed or...

Malicious code in svelte-hms-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aef4271ee0c11f041f62c675a00f8a2cba57ed30894dad3585993fc83796d102 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in steampipe-reports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da60e6d3d0eabe3a13ee33ff083b62e33e8c5dd6a42852a73061c0ce975fa140 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/vero-quaerat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c5d803035d0708d3e5097f172dcffec0e8fd9dcf7cf966310d86bc14fcc8357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...