MAL-2025-48139 Malicious code in redirect-a1jnfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 144cd40316e9b75e61f4a806b5a17a3ad66d2668b1fe532dc5758a405b4cdf5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-t8kcsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d48bdc09f7a339317e5e1351a51269a2f92801fc1e6c5fa906b2bfafbb23925f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-ld0k2a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f762105594d45064c5f4884413c3276f3290f34020261668e50bae1efafcff5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48103 Malicious code in @testcarrot/supply8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62090c615c296faaa4c5b5daeca903ff5f30ce22e263e583ed7b697159fb17dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-udmf0u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0c413d9dc0a3bbc412e869fe204f44c219e0dc76756a297396238e79188fb6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48047 Malicious code in redirect-7bqfg6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cbe30cd65f2e9549fac6967014eb87d8c906c7a0801f82dab1d1de706c0e606 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48046 Malicious code in redirect-4nwrkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe78fd275f2d6de5f5413670b1c4bfae9179f5046ea4a84667876f11670c2c26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rails-html-sanitizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6639c0a00dd79a8b017f59289f23eccd33625402399ac79c43d96fdb92e3b373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nokogiri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52d84f0c9be95071bb514b725ec5c700efe36d5b4ebed67b5e36c3f2cbf6d40e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uniswappols (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05334370031b1fdd7e589e3632bb55b0f0b8514bcdb712b63eba49eef3c86e59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47996 Malicious code in mad-5.0.1.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fadd2947514f57c4785b87fb37e59a161d15ee5166bd00d809150cc3fdcb8cfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47973 Malicious code in ballance-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d2685c68a4c8516f69c39001102234d71d9fdb43a4c2b23ae83242808d9c3b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dompubsub/dompubsub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70f03208a21f43efdf0471c0a1908c3a7229b8ebdd3572b58fe5921496b85902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oxrvxxaslllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8e27b404d616eeff51c5068a177cef1eb09921210572e1451774382c390bf05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47956 Malicious code in oxrvxxaslllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8e27b404d616eeff51c5068a177cef1eb09921210572e1451774382c390bf05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47946 Malicious code in solarpeng_node_eval4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eeb42c5e6381f2debe4e94826c8e1a29e0b0d730abf69e5ca521d768cde1ea04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47936 Malicious code in zdachboostv1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a28b54d5dff3b50a82a5cc25b9e54f948719b8e1fadb9701d3f96b02a5e843d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in winston-logger-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a5c4b995fe69e4aa74c03000fd07f0d610f634bc937efe85b509242671234eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47894 Malicious code in pyrsistent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d4f455b5ff3e3d31b51da91ec02a2186696830d085f7eb5a58847724b15f040 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47882 Malicious code in com.unity.2d.pixel-perfect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7a67e51f9589346d26c184ae8ec584a2a6433b25cfb0189e71ba2ffad5f11d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...