MAL-2025-8408 Malicious code in @leaffm/leaf-connect-undefined (npm)

The package @leaffm/leaf-connect-undefined was found to contain malicious code...

MAL-2025-38939 Malicious code in wawan-sego63-kuki (npm)

The package wawan-sego63-kuki was found to contain malicious code...

MAL-2025-23056 Malicious code in illusion_sirr0_yuxo9_zodiac (npm)

The package illusionsirr0yuxo9zodiac was found to contain malicious code...

MAL-2025-8697 Malicious code in @malware-test-guyed-usury-skeer-pareu/test-mlw3-guyed-usury-skeer-pareu (npm)

The package @malware-test-guyed-usury-skeer-pareu/test-mlw3-guyed-usury-skeer-pareu was found to contain malicious code...

MAL-2025-35001 Malicious code in test-mlw2-bowed-rooks-enfix-spile (npm)

The package test-mlw2-bowed-rooks-enfix-spile was found to contain malicious code...

MAL-2025-39005 Malicious code in webfeat (npm)

The package webfeat was found to contain malicious code...

MAL-2025-7287 Malicious code in @crabas0npm/error-earum-aspernatur-quaerat (npm)

The package @crabas0npm/error-earum-aspernatur-quaerat was found to contain malicious code...

MAL-2025-5775 Malicious code in ec2-github-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c7ca0d5642601c1f68fbd89dabf82a89747d310ed0196ea76061981bed79fd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4125 Malicious code in sdkss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f46cdba3fb83ff72cb7127859fb5140d6fc6f8ed207f45919c5c64bc494f3097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in accept-a-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d066801593b468617494b166d230eba3bfc7df3e454f9125333718ef42f6953 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11077 Malicious code in repository-dispatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6945fe41e15be899900e8df18381144d95f14a8645f686d9b4c96f755e46f8d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in release-notice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9188a12e63756142475c425c675afc5c47d67d58761c182bb785745a2b7298fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10614 Malicious code in coinbse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4aa9d0632071e233fdadb5454835f5b7f1486a8369286e650dd81149dbe5a7f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10613 Malicious code in coibnase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ed70ea7684fa79c6219e6176b180a30672bd43e3309a48fc369480adbe64db3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gerhtreger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f134193ba18cdd700a042bf6b6fca2d3b9475dea7731883fdce08b9d816eb25f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9435 Malicious code in wagmi-toolkits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e0afc9a26ff350f8149860e0e41b730b5079f6c62ea1014a907b2d92dd83e29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9204 Malicious code in working-today--1-blocks-every-second-script-n9qfzq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware befe2b725bae28bf00547f7be8107d102adf5ae609e0ed65f03b5ba7a40f0662 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8859 Malicious code in beautiful-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 541c205f7945260cfd985f94123456491c7f1875b852425930bc9afc540f68f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8719 Malicious code in muthu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 685a60c5c7b1a25ac7c5953df4a74e2f9e979dab99a7225199c06ec36361b8b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8546 Malicious code in @diotoborg/quas-fugiat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 854f5ba96dcbc43961a2d45f49a417c460ffae79dc6926677127e4110c9911d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...