MAL-2025-5035 Malicious code in izat (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d4b31edff23083b4856a85c28082ba87105b963e68ddc7abd96a799d5594b09 Any computer that has this package installed or running should be considered...

MAL-2025-4928 Malicious code in supersccan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 681626695cb78322698dfe68cde7981a4b53ae9a23307f738f4908589c8ef2bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in supersccan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 681626695cb78322698dfe68cde7981a4b53ae9a23307f738f4908589c8ef2bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4923 Malicious code in ac-mvc-cid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 110e255563acbb72629ba03afd504713dfd8fbbdcd576258dde5d481975ac5ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4793 Malicious code in lichess-db (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 475d752d815f7e78b4625da2eea3b8f39eab9a81a1fd93dd56d2d3aab31c379f Any computer that has this package installed or running should be considered...

Malicious code in processwithcloudevents-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8c9351acabc986c61d13f3792948c4426e4f75423a912f6a4cd08f046bdf07e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4896 Malicious code in tim-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50e297c0a9f986b2fbafcdfd60d41c5da7141d50b7145f69606f92ca4423f00f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4834 Malicious code in http-proxy-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7998e5d5542dec49e826d015f403fed34b411fdd9e28030aea1c3aa0fc4657ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4881 Malicious code in server-bare-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39c5415871a73082265e769aa9eb273c1fa34089a841af9700ebb890c064d102 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4883 Malicious code in server-tiny-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8340f02ed93f95eece2017d2788917631ff5e62a3c2b04408288113576747a77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4891 Malicious code in stylelint-fix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbe442bbd2c1150c0a47f6b07e96536f93337a9f509f9ee7891a040a0a7c26f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ve-vores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcef286db1ecd73863ccb186a0860866493f59111555883f1eeea823933a163f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-rule (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28ddf9995544f32e6d2d2c22d70cf91aeff5d5a43e96ef4af49ec5a19714bee9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @loybung/weather-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b8141e9c6d2ba6d7cf52aea200f4a596b4e7151c2c3a67b2713cd2cacc96038 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @loybung/weatherapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90a45282e3a6e0548742dd05cd29a7be7c936a1f4828f697af9a092acc90f2cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4860 Malicious code in opensearch-with-grafana-lambdas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1610e128601e1cf8f57fb7382fb6310a88b8420bcf1aa66c7e0c8b488b5477dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in quake-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fc94b03d9c8d469f9ca333a3c81e540147fdde58a3597b8514b5c771884fe3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4870 Malicious code in quake-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fc94b03d9c8d469f9ca333a3c81e540147fdde58a3597b8514b5c771884fe3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4853 Malicious code in mockup-js-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d47de2f1ea832ed5ca1de7b318fac1b4e38fd7f83c2b66d97c4c38cfab1da216 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4830 Malicious code in fyre-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e82542784f34a2534dd1dd5917f6740c32611b9f154b5ef6a18a62a2934667f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...