MAL-2025-2350 Malicious code in @od-react/od-react-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af2013a6f5bf71bb192bd9c077faf94f1b589b3fa4ca56d2f9038983e8fa35bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2136 Malicious code in upbit-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19217085baa190b98f6d754353d6b47209e74bdd093ab4e508ebc6f0fbd72e76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in latoken-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4deb1d0e6195e2e52b15c4809decbc35fba20798ba8ab501f3d8558296562d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wdpr-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aa07fe623ed4f4dd2faf6053e7bdf936f13e8e3ee0dd7ffcc9af37cc778eef8c The OpenSSF Package Analysis project identified 'wdpr-test-package' @ 999.999.999 npm as malicious. It is considered malicious because: - The...

MAL-2025-1398 Malicious code in bitstamp-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290131c8a4a16e54609d441ddef80033e6014ecd83f8d00a424f11b668329865 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in htx-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7af8cfe522f6a03c75b9bf02f62bb022b2930607b810b33a905d16a26d2991c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1419 Malicious code in htx-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7af8cfe522f6a03c75b9bf02f62bb022b2930607b810b33a905d16a26d2991c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pionex-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fdba857c815f2790dc98795d90b7549921706c69ae2d250aedff3f22eae169c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1423 Malicious code in kcex-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ea7892733069986cb86b8c583398828b93f34a8009708be71742bc26402c753 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1407 Malicious code in coinw-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c0c6baa45c1fd069597025a6670638c1d4bff2a901b784e80e27896ce62b2fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orangex-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d75dcd0936faaa1ade20abad6c214921354886d0070329789e51d75e0a82c48f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1428 Malicious code in orangex-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d75dcd0936faaa1ade20abad6c214921354886d0070329789e51d75e0a82c48f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1403 Malicious code in coinstore-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 553286be2ea7bb7f27b08ebdb284151c0bfe872a19d1b99a0714ad486160b6c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1358 Malicious code in uzx-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b16788177d4ca8abd5a2034d36a92b7a3dc73c13e702d5d52ffaab3ada9c0cd Any computer that has this package install...

MAL-2025-1354 Malicious code in biconomy-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc0a0f2ab0beead5e42fd0146fb90778a0a15b54ffa2b9b65db7fb0612c31d5d Any computer that has this package install...

Malicious code in biconomy-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc0a0f2ab0beead5e42fd0146fb90778a0a15b54ffa2b9b65db7fb0612c31d5d Any computer that has this package install...

Malicious code in uzx-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b16788177d4ca8abd5a2034d36a92b7a3dc73c13e702d5d52ffaab3ada9c0cd Any computer that has this package install...

MAL-2025-1337 Malicious code in bitflyer-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27adcc158506e8b712215cdcbdcc32ff31565b573c09436ba3a95c2a89710fe3 Any computer that has this package install...

MAL-2025-1294 Malicious code in kraken-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61932b79fa7ada492a4bb1d3351e0d7f98b5b44d86ec407d8fc6fff3067cec00 Any computer that has this package install...

MAL-2025-1280 Malicious code in probit-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8db186f44c4cce05bf17f2684794f1def34c2db3c28e7b4eb69347459ddb4c76 Any computer that has this package install...