MAL-2025-4445 Malicious code in nsubstitute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77033df9455e373b7e21f347210206adb17103822278b3d6dacaa8b69423cc7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4452 Malicious code in vega-embed-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7c87f1683f40878cd29b73e1cdd93c106e07459ed60c1404af7f80af25853e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4541 Malicious code in @galaxy-nft/frontend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf1ed32a09dd567fdadae473a43eb77d2c7e74601e2c9d136c3224813938bcb3 Any computer that has this package installed or running should be considered...

Malicious code in @fff-web/fff-utilities (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b538001307782f76d2333a860fd4464fcd00ee81502f585e177ec62b0541262 Any computer that has this package installed or running should be considered...

MAL-2025-4384 Malicious code in package-meta-resolver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fb37bcca1d8bf72c0bc4ef5c43c0d728bfe21662b56cc705c46f806c8a8e46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pdfplumber (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37f1840314016b3f29935e64789cd882de24a5544a6170ad4b123286942c5a56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4378 Malicious code in my-check-inline-loader-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 158a5f06d42d4341fa6161944260a13e1cd79d01a746eddd52ce26b77770024e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4420 Malicious code in zzr-react-custom-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cc679d3328b5509a2417ca20a366fb8e1113772f0f3e39a99e6fb2faab531cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4356 Malicious code in greetpk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48c09bd98c65b4639f2c692574d24bf39990f276196ce455607370716e4a1ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4313 Malicious code in client-file-manager-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d7bed93ad2f473ee07389b950046458fd4c95a59bd0f3d9e20c65d0ee1e2070 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4307 Malicious code in cardbuild (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1f2276e716b290bb85f3f6aa2adeee74453a0e1ed7fb32e56a420b3676cffad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4414 Malicious code in user-auth-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b608ccf9fc17ed8b9f63d111d944139326e52c3a5fb88710e0492e52f8f3ded4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4377 Malicious code in mtfe_cos_track (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90d614a094d82f3391450505dca56f9f0030dd7283a202fcd1f8c5998f924473 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4370 Malicious code in leaderjohn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c077df7d8c082d19789e9fcf5cd83fd4411551e54a116cf9b3a6d77f14fbe274 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4412 Malicious code in upyun-uploader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d39297c53368e33317824b737223e0ddf0d3724963da6941d3d4a17596a3f15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4419 Malicious code in zdauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ee57cb98b7b6e701dc1d19d2b0097b50f824130d6c534a5cbabb106290f9a6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4387 Malicious code in performance-appraisal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fdbbe3c18d12e46e21b82f0cd45dd7a710cb5d467be8dfd538483a6aa5bf3f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4300 Malicious code in appium-rn-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7cb1de288405a6192295e5c90cd73f988b36e415534e40d460c8add2635066 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4343 Malicious code in event-sharing-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13f49cdbe899b99a1893c1bbba29d21d1f5b38fb841d0e2b297c9ed7c4f974b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4373 Malicious code in mbm-dgacha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 584950211093c6cada6fd340d94a5749b3ee5e10049a6d57b9d3f1c494050fa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...