MAL-2025-47153 Malicious code in @nativescript-community/ui-collectionview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 337737895f40e9bb6a3ceade1add7134f43ef138029b408eb08597176f412b34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ng2-file-upload (npm)

The package ng2-file-upload was found have been identified as potentially malicious due to the inclusion of a minified postinstall script. It is considered suspicious because: The script appears to attempt to steal access tokens for npm, GitHub, AWS, GCP, etc. There is no changelog or new tags in...

MAL-2025-47196 Malicious code in ng2-file-upload (npm)

The package ng2-file-upload was found have been identified as potentially malicious due to the inclusion of a minified postinstall script. It is considered suspicious because: The script appears to attempt to steal access tokens for npm, GitHub, AWS, GCP, etc. There is no changelog or new tags in...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

MAL-2025-46990 Malicious code in prebid.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eef953008eb973c33cf8b72ff438a35d772797bcc989e0d909db32655f30615d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slice-ansi (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31f9a8b6cc1f6d9a5da5a97a47505878b0b5c25460cbaeb09cf2032e29b6b82a Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-46966 Malicious code in ansi-regex (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2777701ac1bf8726f2ea353b404c7d765ea3eb7bf0506207db828590ade1bf6e Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-46969 Malicious code in chalk (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 985b6546ed08c8482326a4819faec318c27c1f6d7518acdf384d5f5a8c1453aa Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-46973 Malicious code in color-string (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96d7c74748e121e50b19198355b3f8f9f8ba84bcfd1731896fcf4b9ebc76370 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in backslash (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e028d39ee4bd2bd3a487f4ad116e77bf1582cc08b41fb26fb56f8f83049f90f Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-46978 Malicious code in simple-swizzle (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 052372c7c31f98ff69d0c555f9b8438dac12a292fa6e1f63d4b6160d6a8376c6 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-46975 Malicious code in error-ex (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59f26605a6bcebfcf57f0c0d4a5309f362ad7211b4bea412366a96e93a4db054 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-44218 Malicious code in fajar-mie11-breki (npm)

The package fajar-mie11-breki was found to contain malicious code...

MAL-2025-45688 Malicious code in qimen-qiwu (npm)

The package qimen-qiwu was found to contain malicious code...

MAL-2025-44320 Malicious code in free-fortnite-codes-vbucks-2023-dkzksdz (npm)

The package free-fortnite-codes-vbucks-2023-dkzksdz was found to contain malicious code...

Malicious code in pyobot (npm)

The package pyobot was found to contain malicious code...

Malicious code in down-load-available-zip-now-working-on-a-dream-i6op6-jjzcyy (npm)

The package down-load-available-zip-now-working-on-a-dream-i6op6-jjzcyy was found to contain malicious code...

Malicious code in virgo-jwt-style-loader-titan (npm)

The package virgo-jwt-style-loader-titan was found to contain malicious code...

MAL-2025-35956 Malicious code in test-mlw2-pence-sepad-vamps-fract (npm)

The package test-mlw2-pence-sepad-vamps-fract was found to contain malicious code...