MAL-2025-2186 Malicious code in paymaster-bundler-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 976dfeb2cefe9c3b2fc6b0da31c62937a4bdbaabc387c7f16ce1a86e2b872e7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2184 Malicious code in ncw-eddsa-signing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02e9ad5aeea88c3f0f7df84384b93fd6ce2d6b3d1870fce2910d58ead5feaa87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @airtel-lego/sentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e126e868d890d40f42157c798a5f6385a6b2cadb73c9a125606b59c79057cfdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2115 Malicious code in mahesh.testpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5da4352c00899514a295b12922e7fb0db7bfe4d6a4ae270d951903a7962d3901 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2078 Malicious code in @roku-web-ui/header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d972abcafbb5cdb123421042b1ca014e972c5718f25d35adc6373ac794bed78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2102 Malicious code in cors_error_preventor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7f2a493ecf057d148c4f56052178a4ac60f181c515d7b975d510f351313b9d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1737 Malicious code in asdasd-ejansan-nsjansna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e44be6e486e9467e45baad9e93eec4504ea895be3dcb9ee260c73c69bae600dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2044 Malicious code in mercury-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e9891551eab5d8609b546b0d74d6d60f7405f8ce3ab7ef3205f7210dfe8e182 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1587 Malicious code in fb-components-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0a156cc9bbfceeb92efaaf503c32f71145adbcafa68aa571a5eb055eea23590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1578 Malicious code in cmp-ocr-liveness-acquisition (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 867eeaa4b91a53b10e36a59a627a3ea2e8164a4ec9b0d9f3829fb936f71330bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1634 Malicious code in ton-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f43718ee3297ac779c4afe0caf05923ca62f75fa0eeb7432c978b903ffd9794b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1639 Malicious code in userread_ca-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeefb8d4ce3df4396e3e9d76d7378121581442546e61220c1a81feb794dabab2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1629 Malicious code in tedrertrtrtst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdf77e0f8793f6db3affddedfb08d60085dbbfad04ed2b0f20ef2cecf43ff283 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in explore-assistant (npm)

This package runs commands on import that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9e10cb387b2960187d5b207b5b8dd3c8e8583e0c91741a0c4506c05af801ed2 Any computer that has this package installed or running...

Malicious code in metamask-sdk-create-react-app (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed98a81fafea025740493667412dfaf8dd28cd12988fabdf1118a1765a12733d Any computer that has this package install...

Malicious code in clubhouse-to-linear-exporter (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 763c04a1400336e5c62621aba4027b81dfb2b2ba0b01ec823e0f4f62703e0eed Any computer that has this package install...

MAL-2025-1500 Malicious code in string-width-aliased (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da87811ca5c10d2b1336d454f91e621244269510433b79f3e5365176b8bcbe59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1478 Malicious code in byted-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf324dae7bb985ac37aa0fff183e7f60d94c61c8b95b73049e79fcb49a52c27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in archon2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2efbecb91840f3bd10abd707ee59f45fc25c310b59477444324c0d40c7e128bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1431 Malicious code in p2pb2b-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 239013a9d622d6445f343a6f0649b358c89b51429d2a92f7d64cc09e0fdf3381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...