MAL-2025-5515 Malicious code in r6-info.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5776f3141e453fa085c2ea81f617610e3243fa733cbd8f54d01864a57e54247 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5517 Malicious code in react-svg-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d1b4540b7accc26da839119cb9cee8be93e168c74f00d68eb96e60241796fbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cors-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1abd9a442ac1ffe60c6124eb55921e24de7e14058f76293e8e316f69d378a734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5493 Malicious code in cors-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1abd9a442ac1ffe60c6124eb55921e24de7e14058f76293e8e316f69d378a734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5513 Malicious code in notification-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d50a72b129f2bbf4413f253f4cc198bb674e07061123d5ba873a3374ed7ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5340 Malicious code in datanerd (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e27cc5b384d5f579c6bb715b63787b1c01c0dea212e824f44db6e5fe99b824d5 Any computer that has this package installed or running should be considered...

MAL-2025-5528 Malicious code in viryc-hsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c7e65fbc4460da9aef8938e77b5ffc7aeb72d879e43d1062a2ebc211d39eed5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5525 Malicious code in very-zeld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec45b5cdcc59c7f8b7328486d203c3f448f7e43d5fdbcdd1ebecf25b6fb072f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5526 Malicious code in veynlinh-sky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdb6b2d752cc5210fe846e1420ea6448235027e9ba0b87b2380cb75b85aa66f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in veynlinh-sky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdb6b2d752cc5210fe846e1420ea6448235027e9ba0b87b2380cb75b85aa66f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5502 Malicious code in jsonlogs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de467478eb6a14c26e0545351ab7bf4545a3a66b145512c0b8babc5b8b3a51eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5470 Malicious code in umd-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ad3e74b099ff3ff3f76fcc33fcdb923f0321976d44219e9df1eb0d6113eb961 Any computer that has this package installed or running should be considered...

MAL-2025-5404 Malicious code in es6-module-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ba0c43a1f7b9408d4c635c3862281a3d3c970336ed789bd8a02920546e626da Any computer that has this package installed or running should be considered...

MAL-2025-5443 Malicious code in nodergb-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78a86d286601cf04014b221b8874ef2c2996e5bf707d31143ccefa79e8ab1d40 Any computer that has this package installed or running should be considered...

Malicious code in prototype-poisoning-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb7e50b04c4ffcf207fdb21b54873ca1488fe7dd526b90c1206bc830af9b111b Any computer that has this package installed or running should be considered...

Malicious code in online-learning-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1edfb9c66a33f5e0185fe0ee1fb376f5a4f7974933a07e53f9e23d3281d4fe83 Any computer that has this package installed or running should be considered...

MAL-2025-5448 Malicious code in online-learning-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 853a4095a2f08a67260f3c2220bc45ef9484b10db0a4f909560bf36485cb54cf Any computer that has this package installed or running should be considered...

MAL-2025-5417 Malicious code in i-just-f-hate-bananas-plz-dont-mind (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed1ddc36f47ef52c0cb79e772a23bbc635d435ea0029cddcc4ba60ea0a6ced5e Any computer that has this package installed or running should be considered...

MAL-2025-5386 Malicious code in core_filters (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0388fabeab56d72e90650b3865adb97acc2f6b4fa3605a8053feb33282554bdc Any computer that has this package installed or running should be considered...

Malicious code in cf-install (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13bf383febbfbe211ef3966d1f7449a4bc3e6dafb727078945f859a53298a12c Any computer that has this package installed or running should be considered...