MAL-2025-47371 Malicious code in @art-ws/common (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a490c632daaee5b64f871466f63aae92473f9d088ce9c7d1c40cf9a7de5de0d3 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47240 Malicious code in @hestjs/cqrs (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c115992eefc51ff69abc88f9b1b99c8934c1d03e4a724bdb430fa22e942a45ab Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47294 Malicious code in airchief (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d27bcc3bc35dd516704520eaafbd086947c4ca78d0f28945786da155acc1a73 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47282 Malicious code in @things-factory/attachment-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2fbc742d9dac7f03e5dbac839d5f3d41c70ac7040a8a34a0a7d8164066154b2 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @things-factory/env (npm)

Suspicious postinstall script executing bundle.js and YARA rule match on bundle.js indicate potential malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88b8463d9fb16ac5faed1cd122997c683cc79534786bcf816139cefc13897168 Any computer that has this...

Malicious code in verror-extra (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a93fdd891eeff42ebf7abff1e7a6a00febbc8420ef4bef6c613ef250f4f3ca3 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in monorepo-next (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f0c8e880c0edcdf1ac8b55ac831ee123c7bbd6b338a44a77a49400b60985d16 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in ember-url-hash-polyfill (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99682882eef0dff783a52f47c796529499a9d50c3d9a439d5450d7aa48423351 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47308 Malicious code in ember-headless-form-yup (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed8ff319c2845a41812ca372e9a7e36c894cd5027bfadab1381fefb8892e4074 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in ember-browser-services (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6242a4c034d26f140899c607396425cddc028cec7b680825235b57dabca93728 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47237 Malicious code in @crowdstrike/tailwind-toucan-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 815645af1286f8262a60ed5ee1cfb7b699786a707007300ea5c62602046d2460 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47236 Malicious code in @crowdstrike/logscale-search (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf328d64388e35603ec9a233e2d1ba28fa6fd2508bf245a22733a1818a670e92 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47218 Malicious code in @crowdstrike/logscale-parser-edit (npm)

Suspicious postinstall script executing bundle.js and bundle.js contains excessive unsigned bitwise math, indicating potential malware. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff5e2fca0afc744f9b2cec20ddf740574c42864336447119ed7715555896bde9 Any computer that...

MAL-2025-47216 Malicious code in @crowdstrike/logscale-dashboard (npm)

Suspicious postinstall script executing bundle.js and unsignedbitwisemathexcess YARA rule match indicate malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f7539ca83a2878a7b5b892aaa154843f462994bef40d9d14698dd04a2f0ffee Any computer that has this...

Malicious code in @crowdstrike/foundry-js (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b692cc7f6e5464ffd853e3847c9818751b07e7730ef96f968e01aea83827605f Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in thangved-react-grid (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb6134bdc146e263c03b7d3570bbacb8e08229e146913f1c48c206423f98b2eb Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in mcp-knowledge-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4724282166039be3118847ca134f1f7cabc4997246050c1b2a195ad521ed995 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47352 Malicious code in tg-seq-gen (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e83c207a30feba0d5d041c70319284c5872d9f00baab2d79a77ab6a8f267936 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in tg-seq-gen (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e83c207a30feba0d5d041c70319284c5872d9f00baab2d79a77ab6a8f267936 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47350 Malicious code in tg-client-query-builder (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e88f4b4247a247c45d69b7c6082806c246a97e993f3db259215f30d0774e8db7 Any computer that has this package installed or running should be considered fully compromised. All...