MAL-2025-5354 Malicious code in @wh-components/icons (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dfd313ae1d8791cc49f1a8210019c206b2f892b8709b6d0e93f78f06653caf1 Any computer that has this package installed or running should be considered...

MAL-2025-5167 Malicious code in react-svg-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af2a1717363aad3bb129687fc2526ded4d96a8d7e578862b6d400cf5864e1985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5086 Malicious code in pysvelte (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0d2f08ecacd3e0b9d9edb2f45b372b814e20fc212140150b8b727be6cecb89d Any computer that has this package installed or running should be considered...

MAL-2025-5160 Malicious code in internal-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3d884505401eed92805f1ab05ea82f7cb8f024bd1bc32a575f2068814a90a69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5005 Malicious code in vscode-azurecontainerapps (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ad54ec265645c2e7358384082a1b1f2385a1caa652b65c359b13681a211b30 Any computer that has this package installed or running should be considered...

MAL-2025-5003 Malicious code in odyssee_teams_api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9634a76d594664463c45445417dd33af9980310ff86b362704e5b0b50daed079 Any computer that has this package installed or running should be considered...

MAL-2025-4995 Malicious code in chii-aungpao (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d137cd4cbdcb873723e6209b260d08470543b42cffe8dcd42c3b31106ce78012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4997 Malicious code in raydium-sdk-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15f2bf4f7d00a9a160e45525fc4b09ccf0957db423f83602f0e2aa72dde0ff2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4979 Malicious code in composer-bin-plugin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 036dd51bd9e780aa61c787fea9cd7fe31f583824332caae73063187ceb1056b5 Any computer that has this package installed or running should be considered...

MAL-2025-5067 Malicious code in wasm-wasi-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 320ad464f0780881fe134c1e9990c2e1a180a2ab4b6b103e26439d8861709021 Any computer that has this package installed or running should be considered...

MAL-2025-4978 Malicious code in buck2_explain (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 373ecef71383664f4c6b0f16f64e2e99413cbd225df32594d6531fe79293b2cd Any computer that has this package installed or running should be considered...

MAL-2025-4976 Malicious code in client-vue3-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949b1148db60c58f37c8fec03067aa1974329c0f5719de4425b8840f213b5f2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4974 Malicious code in pipet-code-agent (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 848b7a72d8d85ada52bafd17d3a0a4550d76cdaa38138f368599a1d0a16c6358 Any computer that has this package installed or running should be considered...

MAL-2025-4970 Malicious code in com.google.play.appupdate (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3947330cc41713516ed88cb21b4ee7eb95b9b59d534811223a3bb3d9b696b24 Any computer that has this package installed or running should be considered...

MAL-2025-4965 Malicious code in zora1abs-protoc-helper (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32798df02edd137f9c9492f0b336887efd45c7af6f15e4bac809b1e107d7b4bd Any computer that has this package installed or running should be considered...

MAL-2025-5070 Malicious code in zora-logger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feca2e7f9d5aafeaafed7175bed1bc94f57e9d037a6427f54219d5a59ecca0a3 Any computer that has this package installed or running should be considered...

Malicious code in routerprovider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bb5da39b59767e758d61cc281539a1860fb4914fc3b6a63e5bb7adfc9a4e12e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4945 Malicious code in zora-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5434c40d3048f846ef1d268e25b386ee6000460a939ff2aa2d91dd67ea1e897d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4944 Malicious code in zora-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e30772071c478b59fc6e1b5d6140a12299f0c0c63ddf092764161443070c0b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zora-utils-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a55ebb2c5179f192b3e0cb586a0bca313b3288b7b71ac7bd70725eb2d41b1e9 Any computer that has this package installed or running should be considered...