MAL-2025-47288 Malicious code in @tnf-dev/react (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da4d6867e6189f0175e6f56e18ff4291470344b5f188c83b62ca56759287e142 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @operato/pull-to-refresh (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39c531d69236f30c439fba626f7b50e5ec2e952f4f6f6f933a5ae1603f7494b1 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47331 Malicious code in mstate-react (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 997c10662d47fa55ca8cd4db612274bf4d589c7d82d079b48fae3261bb5c65a7 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47281 Malicious code in @thangved/callback-window (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed460a227837fd3f7ae156229624e47d46e10b4bca19f0089a29f75c5ca13e09 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47325 Malicious code in mcfly-semantic-release (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1315013826ed95b11e8515369cddd60b41fede610958efd720cae85c8d57b21f Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47284 Malicious code in @tnf-dev/api (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b9e8e4fdb36ce27b5711a81c3639dcea62b2982fac039847b621e5354efa762 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47305 Malicious code in devextreme-angular-rpk (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48daa4ee53933f4f74c8a6cd7644ad441f316912aa3e282498fe602b91f2bc40 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47327 Malicious code in mcp-knowledge-graph (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e385978fdd606a1cfafadbcf800ed35523992d9a683305fcca51a6f12ea8b0f Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47385 Malicious code in @art-ws/web-app (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e62980b203a34306053bc41b9a7afd7d7b061fe6751f1e7bf037f85496995e2 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47261 Malicious code in @operato/pull-to-refresh (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39c531d69236f30c439fba626f7b50e5ec2e952f4f6f6f933a5ae1603f7494b1 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @things-factory/auth-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db891d17c83cd814d4976534e1ff8e7675f41f0c50baedecafab80bcdf4156fb Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @hestjs/demo (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d07b84a8fad4cf98766b909452076e1349e19abe6fa8b41b3a2d3326650fb05 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @hestjs/eslint-config (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43db3cfefa88993ac8bb063a14e25b560d13c5aa8a2af7472f72b2adb2043cd8 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47381 Malicious code in @art-ws/package-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83ba9ddbeaff9ca9f10da444f6eebc52dd7ffa99def6e187eab42dac24a4d7de Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @nativescript-community/ui-material-bottom-navigation (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security c1599f8fe4dad02bc9f083f9d6c3af166818ba3a80e2bb13c37a4052f581b81c This package was compromised by the Shai-Hulud NPM worm. The malicious payload steal...

Malicious code in @art-ws/config-eslint (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b89332826cb57152a8288941846a48e6ecb1d8d979bf641a288f740c34a0b99 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @nexe/logger (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c437c0929e0fe9f69607532dcf91adde5406cc1cf4e12f1f5b277d73e6e73474 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @hestjs/logger (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5b44b7c89eda3e220301eeba947231de0ad075f98e11343d2a169df9341a6ce Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @nativescript-community/ui-material-ripple (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 98bc88d841f7cc3ff226e714214d8710303b66e19159e2672746eedc0d7a5c0e This package was compromised by the Shai-Hulud NPM worm. The malicious payload steal...

MAL-2025-47382 Malicious code in @art-ws/prettier (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0ad654106f2b917f883774d7484c2a6e0b8321808a7693b56ce60c52eaf85e3 Any computer that has this package installed or running should be considered fully compromised. All...