Malicious code in dark-switch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12148dc0d61c4e63738c356e019b3cc4d6ef0b5f1b23fae084daa1be5dccefd5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in my-js-cdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ded23b9cb07e2872a7f6c888c1561c2341dbefc0efe38eed634d46229785725 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in online-learning-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 853a4095a2f08a67260f3c2220bc45ef9484b10db0a4f909560bf36485cb54cf Any computer that has this package installed or running should be considered...

Malicious code in node-orm-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbb41a965942183f81095d4f0ef7ad9d7f21c6e22811b0dd5781a5603497236e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in graphlibcore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10441453f5296007b2b77ca9e580f3ce0a3ac50607cae82a6fe5858aaf1b0dee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-49011

SpiceDB is an open source database for storing and querying fine-grained authorization data. Prior to version 1.44.2, on schemas involving arrows with caveats on the arrow’ed relation, when the path to resolve a CheckPermission request involves the evaluation of multiple caveated branches, reques...

Malicious code in feed-testing-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37ecacad9f24ab5516c2aa28546214f1a2fa2f1156c02e06e9e9b8dc41365e8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in healenium-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 789d69d0ca569bcae290e9b2b348366d669711d7cfefb0d5927e4bdc6e1f84e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nmp-frontend-libraries (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9320142027c800d4b8427512d6c6c219bc910b204b892be28af3a3849302e649 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fohost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 381794f08a206c0fe6726ea73aa3391fbf97c17ae26096768ee4fc054d2c007b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bbm-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8adff756b9b1415f9a70c8273fea0bc9454bc3b33abb4efb2778559d480cdcb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdp-agentkit-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d53da33893272680319756bf6d56dbd2de8b7d06bc19bd46c65f06c11336031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in language-rego (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 540256008e129e110408e039bf594aff2061bf0cd955b6b80004f53aa93b9d57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolorem-dolorem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab92bdb061852057c037e9c222165d2f5122aef35da6d4e7359e6242672171ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bankrate-iconography1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acb7b8b92b6bd6e05b8e824ac61d60136b54ebf070007817d2dd73219ff2d8c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jiworis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1123aec6d4dbdee29f1bb9f2914d16f0b88719c53d3533bd102bd17153693e6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/quibusdam-sit-qui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24c9105ca92309394e1d573bd34b0377041f5a93b37a4ca6d91a988c6c9c4f1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in compassrnsampleapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 152079a0a74380b7d3f95fb7f9eefd1319559e11159fc2e50debea4b68e1412a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in c3-pricecaster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b03dfb89422ee188083a005d46e87873b3548d2f360a07d2380736049483de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-8204 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19d2bd70e492fa2d8455fb563e45d0bbde9cee99bd2e5a7fb5f674093278310b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...