Malicious code in chime-config (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5056e6243008cfb8f92e26f71e00d4f08abfb910bdabbbf516dde94a28421ac Any computer that has this package installed or running should be considered...

MAL-2025-6190 Malicious code in obvbd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44f7f11754648bc94be283584503467c19579c3be10da1b59b66af2cc6a509c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6180 Malicious code in mydealer-configuration-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a6c72b4ebdfecd3ab01a485711a49a10423d88ba0231b62418227c458a78a2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6198 Malicious code in sha256-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df5d9762214be9f4321d8e3634eeae69ae8f288fd94ae1a07bf6b3defa487b97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6162 Malicious code in fxa-setting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f974a3b678356e1d011ca08a0cb13eaec2f69e2d5ca4056fbfabf9a2864156eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6194 Malicious code in scenes-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39e4ea55e37dda98df207b010b0fd6e64dc467ed051fa91d18337a7ea9e46152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tfjs-backend-nodegl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f21880e33cab4a48939f274436f6f33953a8b4eaafb7f850ac6492008d81bac8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6148 Malicious code in airbnb-shims (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f76fda5dc4d9010b0a0adb54190e014c01ed266b27db4335bc079d0035081c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6200 Malicious code in simple-line-icons-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5bf593593545cc9181f1cc4b8f5832bc438fe436a6181cc341cc59645a558c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6088 Malicious code in dewiz-xyz-protego (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12df6549a4cbc6f4567449f311e376161847587f484c17de41234a4475bb0a3e Any computer that has this package installed or running should be considered...

MAL-2025-6012 Malicious code in grayavatar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24a840f69e770a8a7f48a5cd9ce41432db11d5c5f9f0cc48c3d64dda80c93fad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6011 Malicious code in config-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ca038d2292d65fcd63e01c65289a778b680b4d88ac8f282cc3bcd15d496497f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5998 Malicious code in eth-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7abd5491d54b588d04ced891539747a0d295877ddfcba02d67fa05ff8953d60b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6001 Malicious code in react-hook-form-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7bbb033f9045b94810312d6c18ca8a53e34b6886863c10eaf2521f35349775c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5991 Malicious code in lunasec (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52ffe1d0846a694f3b7e75d9064515e2cb7a42074ea0b54d8077d5bdb0cf3993 Any computer that has this package installed or running should be considered...

MAL-2025-5988 Malicious code in router-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d79988cd859092569021535b2a0ed329cc589611cb68ee789a342c0a1b0945e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6014 Malicious code in okta-core-component (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32a2bc49ecdb3be636c0bbd744a8e1b52eb5b19d91316f69ce08d9cf870ed247 Any computer that has this package installed or running should be considered...

Malicious code in @forge-ui-components/media-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3352739bbbfe79ebecd02fae7c7026cc29a1c947649126c59f096d8cd4bbd02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5871 Malicious code in @gdcorp-commerce/cx-orders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ce80126682f56a0068ac541d5304235859cbf407b6945eee895e676fb186858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5941 Malicious code in node-mongodb-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ac7ad5072828933069aa01c5de1ac1780566e205e1866722a012b7fa73c900b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...