MAL-2025-37017 Malicious code in toledo-chess (npm)

The package toledo-chess was found to contain malicious code...

MAL-2025-5775 Malicious code in ec2-github-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c7ca0d5642601c1f68fbd89dabf82a89747d310ed0196ea76061981bed79fd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4125 Malicious code in sdkss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f46cdba3fb83ff72cb7127859fb5140d6fc6f8ed207f45919c5c64bc494f3097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in accept-a-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d066801593b468617494b166d230eba3bfc7df3e454f9125333718ef42f6953 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11077 Malicious code in repository-dispatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6945fe41e15be899900e8df18381144d95f14a8645f686d9b4c96f755e46f8d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in release-notice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9188a12e63756142475c425c675afc5c47d67d58761c182bb785745a2b7298fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10614 Malicious code in coinbse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4aa9d0632071e233fdadb5454835f5b7f1486a8369286e650dd81149dbe5a7f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10613 Malicious code in coibnase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ed70ea7684fa79c6219e6176b180a30672bd43e3309a48fc369480adbe64db3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gerhtreger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f134193ba18cdd700a042bf6b6fca2d3b9475dea7731883fdce08b9d816eb25f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9435 Malicious code in wagmi-toolkits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e0afc9a26ff350f8149860e0e41b730b5079f6c62ea1014a907b2d92dd83e29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9204 Malicious code in working-today--1-blocks-every-second-script-n9qfzq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware befe2b725bae28bf00547f7be8107d102adf5ae609e0ed65f03b5ba7a40f0662 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8859 Malicious code in beautiful-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 541c205f7945260cfd985f94123456491c7f1875b852425930bc9afc540f68f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8719 Malicious code in muthu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 685a60c5c7b1a25ac7c5953df4a74e2f9e979dab99a7225199c06ec36361b8b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8546 Malicious code in @diotoborg/quas-fugiat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 854f5ba96dcbc43961a2d45f49a417c460ffae79dc6926677127e4110c9911d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8586 Malicious code in @diotoborg/quos-vero-asperiores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeeb63febd0b43eb1d33409c9d0c4ee90c67d8fe81c6a2b01cf596285f08b995 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8666 Malicious code in @diotoborg/ullam-molestias (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f4ed712d646112b0456676bf64cde4daef17864537618a1525386bfcbb89cc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8061 Malicious code in react-rps-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b11c1a1b418f9d157a025f06882888a1836ebd32d5cec473f4aca9c82cf8f2ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8034 Malicious code in glitchhub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 757bd22d021a5c100b3f73603911571905c7f3b4ef9dcb45297ddf429ed2ae81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8030 Malicious code in @pampa-ui/pill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01554c6b881f5bdae92811e75e6e7be41ea76d7493fe3519c9c065c3c75141ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7953 Malicious code in egds-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0231fabb2b10a136d8f6c28e1c1f5c2ccd55a8a88a202c3ad5061b319bf1c465 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...