Malicious code in @afg-ikea/ikea-modals (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5202678b3acce22244ccd41e821e68167ca297f94450cb3b5debeac9ec2c50 The package @afg-ikea/ikea-modals was found to contain malicious code. Source: ghsa-malware...

Malicious code in storage-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2793f12e0ee779bcb14e4a4a5198059f576c8f832a64238e1584d6b2cd34209 The package storage-types was found to contain malicious code. Source: ghsa-malware 43db13077851634493e5c8eded5eb06487ff41dcb7dad90ab9a2e3101e14b323...

Malicious code in n8n-nodes-zl-vietts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2958734e09db17aba6589bb89622305f26fc83a16d475018b5ae88b694b9e4c The package n8n-nodes-zl-vietts was found to contain malicious code. Source: ghsa-malware...

Malicious code in theme-neutral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9701381076541b8fbe448e03eb174cb40e2fd27237bfb442f219bf94911d035 The package theme-neutral was found to contain malicious code. Source: ghsa-malware 50a19fb9e329c206942de6cdd79f346a105320f4e71d0b652b154001b1dde8e7...

Malicious code in mixpanel-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b11bdefc18a5b590716cefe2036f1f759ccb42fd3c22c420ac524a479ff9f01 The package mixpanel-lib was found to contain malicious code. Source: ghsa-malware 03fe07795e21df3debb6abf06b5b47f19ddd7996e5be6b06d8dd07fa37e7cd2f A...

Malicious code in wifi-killer-xnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc233a0f06c7d7ecc69b5b2166295c9e8b63c8c05198355f8f80295907125e17 The package wifi-killer-xnet was found to contain malicious code. Source: ghsa-malware 98f1d50e89f69d69cfae05f464ddc4db1ea8e83fb48168cad1f75c87d4705a...

MAL-2025-192383 Malicious code in chai-uuids (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42324f1af790a75f6b7a0e081a7d97f1e299d3d3c8c815e37c594d0835ced4a6 The package chai-uuids was found to contain malicious code. Source: ghsa-malware 35cdb6e3e91aabd46ed85adb22b6972f688ae93b61f82f3cb8e2adb8f4294c48 Any...

Malicious code in typescriptjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6082397917a827f5633f57e4e1ab18b29257f511ac05859c4c27d6b632fae026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48195 Malicious code in redirect-nixl3q (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd2084ef33a02435f2b8aa0028983b0e47124d66f442e8241d323fe37176caf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48233 Malicious code in redirect-xs13nr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1049bdaa947906b364017bb13767c04598a526833d572bdc908840a74996a93d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2020-22061

Malware in sbrugna...

Malicious code in @openzeppelin-compact/fungible-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6a498e2883ed809f6b7d0b0fdd09f303aaf958af5a94634d835e001fdc4db78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nativescript-community/gesturehandler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c25d691508dd5a2da24859854f28998b2bc0456d3e73edfc5aeeb61c2fd7d1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in headless-skia (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83bcceb835d149498bab1ac808c57632e42a51f4ee45c21cee8ab84b1ec14bb1 Any computer that has this package installed or running should be considered...

Malicious code in community-pass-react-native-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45d465e1a0ba3936c02d875635041ba0362e96dee19c7f7d727391a4bdcb5dc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rita-remoteista (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ae4e995a07a4d4dde2738ea6213c272990a85dd9d4f6f3ff92eaff2cefd021b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jenkins-for-jira-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb6219412d635487c17cb5e33f5085c2fced525cf0f510f8df2728d299f028f Any computer that has this package installed or running should be considered...

Malicious code in atlascode (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8253ba20040dbe36a55d6e0d506f11c3fdb26fc8991cae009b2da2531d971433 Any computer that has this package installed or running should be considered...

Malicious code in caglass (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e455bdcd125bc7e808bd44aefba85c1ef5838aa36b61d5fd75f2c6f026bce1b4 Any computer that has this package installed or running should be considered...

Malicious code in hardhat-deploy-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb9d3b8f687f5445ef66903c25ffaee9514d721441a15b7e4c4dfbf58caa7930 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...