MAL-2025-4638 Malicious code in atlas-global-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2da4219e6bc0eb3a57f45a9fef584e5c6b27af790d62395489febfeb78c5bf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4658 Malicious code in terraform-provider-leaseweb (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4805b99d4eef235ac9d4e28a0c763325dac930bac26423b95e7c74a2f7286df Any computer that has this package installed or running should be considered...

MAL-2025-4616 Malicious code in consumerweb-captcha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7cee9c3e993b7ea96db267f4f869102dd00139de3ea743914d0273ef165a99a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4653 Malicious code in pkurbatsky-uni-kit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dbcb621ff6e34880a313bab99393077ebdbb6915411f35c9648e1741ce502d3 Any computer that has this package installed or running should be considered...

MAL-2025-4671 Malicious code in @fronteg/react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a00cbd466b7c4e34b73a25864bfbbf1d649af40b160cff27b859d85074a74fd7 Any computer that has this package installed or running should be considered...

MAL-2025-4594 Malicious code in blesx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e5b8fa8d08e2e5e4608dc0698b4e0e20ce49e1c93bfdbb4b37334cda83f5f6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4590 Malicious code in rest-icon-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1df42e0b9f4ff541c485fd5c4bb6ebabd85ce2a7aec08ffd4a6234650332ac9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4534 Malicious code in vite-jsconfig-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa2206f03805567e12ada7cbae343d47492532958d8f685e73562fee9972b3b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4475 Malicious code in crypto-base-class-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6367d8d4ea69716ade6df0bdc1288d33b7d0028c1e4416d2dc3f587f853cfe5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in m03124geeztd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b68dbf52968379b3612817a4951913aecc568c526510b1e8f52a5dacf51301d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4472 Malicious code in athira-windows-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d29372690a56d28aaf32363029d85a2f0f5b5eddbe8a7a2bb62435171567b354 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4521 Malicious code in wise-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07407468d93ffb1f67aabfd6c608443ec2a8d822ade6a98f3b9f6387178fba80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4500 Malicious code in resize-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfd42601e27c2460acacb70b9c49d0443b44d78395d43a6b2491f24becdc1855 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4510 Malicious code in style-beautify-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c7477260a4838812ce1ffefa15867a9cc2252be7e06ec8f060d4fb919d757d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4482 Malicious code in ideals-theming (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b76e002c6ea57373962d0b94a4186cd64f4de50ff591d923b550f96f25aa7fa Any computer that has this package installed or running should be considered...

Malicious code in wrapper6 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 140a14258e5028ff6bb7a9fd20b73655263c97ed3f7039d184f6f94f2c776121 Any computer that has this package installed or running should be considered...

MAL-2025-4571 Malicious code in muto-kaiju-npm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65ff09fff02691fb8682b4201d712727ea9514f7d2cade6768fd0fe5362ef80e Any computer that has this package installed or running should be considered...

MAL-2025-4550 Malicious code in angular-tealium (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0c32462ecdeacbbbfee96fd4f6e31ce41d373f68b0ebb3ec17667e26a9ee66d Any computer that has this package installed or running should be considered...

MAL-2025-4552 Malicious code in ccv-token-manager (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ce8a53c46aaab673372ddfde017c10e1b84cbd5b342474448f9ab5e3a5a37d2 Any computer that has this package installed or running should be considered...

MAL-2025-4577 Malicious code in reacts-gh (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f438d6df955eb639b0090cb670175f993ce6f6e5ce1f8d1926d236447864460 Any computer that has this package installed or running should be considered...