Malicious code in babel-plugin-transform-inject-template (npm)

The package babel-plugin-transform-inject-template was found to contain malicious code...

MAL-2025-15294 Malicious code in babel-plugin-throws-helper (npm)

The package babel-plugin-throws-helper was found to contain malicious code...

MAL-2025-15296 Malicious code in babel-plugin-transform-html-template (npm)

The package babel-plugin-transform-html-template was found to contain malicious code...

MAL-2025-15295 Malicious code in babel-plugin-transform-decorator-props (npm)

The package babel-plugin-transform-decorator-props was found to contain malicious code...

MAL-2025-15299 Malicious code in babel-plugin-transform-raptor-renderer (npm)

The package babel-plugin-transform-raptor-renderer was found to contain malicious code...

MAL-2025-15290 Malicious code in babel-plugin-mail-transform-inline-imports-commonjs (npm)

The package babel-plugin-mail-transform-inline-imports-commonjs was found to contain malicious code...

MAL-2025-15292 Malicious code in babel-plugin-tedium (npm)

The package babel-plugin-tedium was found to contain malicious code...

Malicious code in babel-plugin-transform-html-template (npm)

The package babel-plugin-transform-html-template was found to contain malicious code...

MAL-2025-15293 Malicious code in babel-plugin-template-literals-qos (npm)

The package babel-plugin-template-literals-qos was found to contain malicious code...

Malicious code in babel-plugin-tedium (npm)

The package babel-plugin-tedium was found to contain malicious code...

Malicious code in babel-plugin-server-remove (npm)

The package babel-plugin-server-remove was found to contain malicious code...

MAL-2025-15291 Malicious code in babel-plugin-server-remove (npm)

The package babel-plugin-server-remove was found to contain malicious code...

Malware in babel-plugin-nordic-module-resolver

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

@tarojs/rn-runner (>=4.0.0-alpha.0, <=4.1.2-alpha.2), @tarojs/rn-style-transformer (>=4.0.0-alpha.0, <=4.1.2-alpha.2) +2 more potentially affected by CVE-2025-5896 via taro-css-to-react-native (>=4.0.0-alpha.0, <=4.1.2-alpha.2)

taro-css-to-react-native NPM version =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.1.2-alpha.2 Source cves: CVE-2025-5896 Source advisory: OSV:GHSA-F5XG-CFPJ-2MW6...

Malicious code in babel-plugin-some-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef77aeb30aa83ff02708a8b79fc182591838ee0f280c48d729eca82e9a60bb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in babel-plugin-some-plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3614 Malicious code in babel-plugin-some-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef77aeb30aa83ff02708a8b79fc182591838ee0f280c48d729eca82e9a60bb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-plugin-remove-jsx-empty-expression (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-273 Malicious code in babel-plugin-i18n-calypso (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5be90c4dbcb38fbd7461004561537640adcf0ee532efbe124872f5f11ebd82b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-plugin-i18n-calypso (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5be90c4dbcb38fbd7461004561537640adcf0ee532efbe124872f5f11ebd82b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...