MAL-2025-2457 Malicious code in career-craft (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5d3af1a920beb4a5ab94433e38b127dc8105f4ca7e527ad53b5a80b0e992111 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2416 Malicious code in snore-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2adbcccc555d322802b23b412a8a727bc22982f0fd574b51ca33e7ea4b89804 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2368 Malicious code in cclr-huge-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06eea48e153d00f9562b9e23b03c116b3943d7fb1a0b903cf602c7cb63e02f2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2385 Malicious code in gl-emoji-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbf0085827239922ce13937a55f76a51d8017ed351ca34e30214b10670b558a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2363 Malicious code in bigdopebro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baf62f671d87a93f755cd86da270bcd8a7cc804f896ab31d7332bdf34811afa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2295 Malicious code in angular-remove-diacritics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5abbdf7a3253b0f21066be1be90dc829f3e83d3cd402e748a428c5a1b36f4918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in upbit-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d286e3f82c3645432dde4b543a65c1f912bca545c3ad1abd486e8efd23bbde29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hashkey-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7efb197286addc635336eb12533df783327df0937a47113a07cda0096dfef5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1600 Malicious code in issuecheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 032fb9205316d8ec957eff52f5df8ac183a90ea9e297a59ffa97c13f85a8d7d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1407 Malicious code in coinw-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c0c6baa45c1fd069597025a6670638c1d4bff2a901b784e80e27896ce62b2fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1405 Malicious code in coinw-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f2a295fd0929cc6a57de7c7f506b1bea6f9c586967b38e3429554a2d8094590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1368 Malicious code in node-tg-bot-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa25c03f22731cf537fcef307f4a17c8cde7f9e55ec3fbd4e39168cb337ceccd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mexc-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29d69b3c891155b693e55fbc8734237edcf681cab20168d998375ea5ebdf2de5 Any computer that has this package install...

MAL-2025-1251 Malicious code in kvpair_db_upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6b88b2e00c8a0ffafc2f6be3ce66829c68d57693b4d88546a26344e712be0f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v185 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8939bc2acda7e18713b6ff48ec41b70f18201a851beeabecd0e544cfe80430c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1181 Malicious code in ton-payment-channels-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9e7497de28b982ff9a30a2d494d34eca9c190bba81a330f16ca8cdf7955e20e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-599 Malicious code in waltz-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0733a6b2b4540bd79978ea53387244384311fc91be38bff9344132f8aeec77ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bookingcom-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 286ccc5f43952c4b8eca7845eb43d1934d6571300be804977b475e075ef680cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-291 Malicious code in design-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7a60ac481f3005406c24eaaf2970a7d6d349201ce49fed87277a9436b52bddc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-286 Malicious code in calypso-url (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5b5a2d30d2c6e627b6a87db65706fe53bcc14fbe8d756ebe38893257bf23b01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...