MAL-2025-3515 Malicious code in @baywa-re-lusy/nsemea-customer-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04cade6fe87118ba0ff073c78b84a484c6d2ec20889cf67ea74c255058b7d6e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3512 Malicious code in @baywa-re-lusy/nsemea-address-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72abc75363d3a49d94650c8b66324e9d38506ea8e2724a1521a930555a996faa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3485 Malicious code in @zener-soft-consulting/ab-webcomponents-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d973a87cc8f873fc6982e52eddeed55981da33922a816ca69bcae20b076524db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3503 Malicious code in testdoges (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042d70fcdce39518a09164e3d86d8403a4de0ad9697aee15c56f3fc289985a8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3390 Malicious code in dowload_ebok_historia_do_movimento_pentecostal_no_brasil_by_isael_de_araujo_k3o0z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b931a05ee3f5829b5d724725a78669b59ea684aa7dd4cf3c030dadad9dc48a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3271 Malicious code in node-json-converter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ffbaad687f777a1680340dedffa3333cb8f4e0ada8e0a886e7f798a9a59ee2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3036 Malicious code in @hongfangze/concurrent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78c38d6d5d1eebce6d9eca70a76746065dfff24d940d9f8143d7b3654605b635 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2780 Malicious code in pplinkpath (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b566f3227061147ddef30f6d4a452cec55caaf2812bfb5c44272f114fe21656 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OESA-2025-1294 pcp security update

PCP provides a range of services that may be used to monitor and manage system performance. These services are distributed and scalable to accommodate the most complex system configurations and performance problems. Security Fixes: A vulnerability was found in Performance Co-Pilot PCP. This flaw...

MAL-2025-2573 Malicious code in keypair-encryption (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1265d869c665e7bb42b4827bc9f51ad572b2ce181edebfc84eeb5698e0e39048 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2582 Malicious code in thiserror (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware badf31d06e4224844dd07745bbfb4a2eaac4c051c4a92d7bb179680c8220b0e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2478 Malicious code in you-test-test-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13a9b3aed0c3abe33ee85f5fc9b7c0dd8020835cb6f1c038f1f6dd6822561a3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2408 Malicious code in rekilog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef04608cee8fdce58cca876b6f5e7cb4753ad72459148b7958b20c8526434769 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2382 Malicious code in eslint-config-dx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17d0a9a27ae607e3c566576cc74707e5a5bc3447a3cce8535fc8ffd18c396936 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2397 Malicious code in oauth2-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cc95085eb1819e853bafa9792a2e3d1b7b761fd85657e25b110586cbb78d997 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2406 Malicious code in reason-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0c4a55fcc5c8561afbb5e8b0657b735402db2afe7ac15858050352a3a8aa8c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2413 Malicious code in secureshield1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c523ad578efae0d36959b764d0ea4df3c7c88342580a6b3903a2873af85619e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2317 Malicious code in is-buffer-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec624113b772adb7a894fb1633bfeb1846f0b05bc072b04aabcb7cf0ffd36812 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2303 Malicious code in company-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 100c9d7a50130bea1bde224e847ea63eeaadc65dfcd332d6cf0132d686af772a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2241 Malicious code in autogestion-aprendizaje (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a10891d5659b15f733c35690ff9315e18a84d6eb133bbe3f99e6ecd9408bec37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...