MAL-2025-3640 Malicious code in platformio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9bb7d5665eff08ce5b374ad9aed6cfbc3e52382b8844ec4debdba9b0de6ac6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3628 Malicious code in jade-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b17361af15b63f316aef53a11fb6661254a32f301abc9e431c1c2e08f54bdc0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3613 Malicious code in awetz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50ab38a23d32c01ded4e220aa81684169b2a15b5f423ddac77957543d2da8c7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3620 Malicious code in flashcanvas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a7c1d4db3a33aaeb6b2b80bf058332cdd082406999470a56960c36f28ad99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3712 Malicious code in eipsend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3604c7d9351ed524566db2c93f9e4a9138606327e884352f93f2efab29494390 Any computer that has this package installed or running should be considered...

MAL-2025-3611 Malicious code in arena-plm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f794e10373e988ac142e6dcebe8943efb8a623a7c9db9bee70ce592ef1e5746 Any computer that has this package installed or running should be considered...

MAL-2025-3583 Malicious code in selfbot.js-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbdd8332c80f739c8bf3a99e9f32609e53a108f2f7eea79c12d65a8af551c280 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in serverlog-dispatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6dcf491363258b87486dab0c11447d6bfd9cc41eda8ced61c5eaa12f683d688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3569 Malicious code in expo-sessoion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df1f3216c0e974fd221139390340264f652810347ffd8e432f00d398412c0058 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3559 Malicious code in unified-login-url (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c824326fc0b6e80e3de9e7c838981c72c6b14fce17d41792db6a4e831bc8786d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in multicogs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f85a167740adb72f8d007b2b4adaaa8b7f08b2b5626f394606d41c79afaed4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @baywa-re-lusy/nsemea-core-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd59217d2262d20a36701378b6fc7047b8f1a20c638f6aaaf18af11316648ee8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nsemea-alias-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a6452557c7bf4d2ec5fa907c2a427e3ee1cdff756a76f9d2369a64a48e239d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3517 Malicious code in @baywa-re-lusy/nsemea-salestransaction-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9605e1f17bd8907425f5176a55ff40f7f9ffc6c94912d17c753f3fdb34361caf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3513 Malicious code in @baywa-re-lusy/nsemea-alias-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f67616e336d1069f944f5d2fb535344c5f54f4d5d99c99811786e5dd237824a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypto-encrypt-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ef44f851c3516fca1e3dc72236ae2c87cf821ded922150cca14e07ff9b4fbcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonsecs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1eeb6d8e8a22f3743e3e9a4d19a6c26029ac37f1389bd002a5f0b40213021a28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3527 Malicious code in jsonspecific (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 429c7a9887c0f21c1ed1e71850a3cd3434fd578694e65fcdfdb60d7aaf896e13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3520 Malicious code in @reserach_org_jfhalsdhfkslsfds/openai-server-skfghdg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 531ef457dbcd25a906548abdc4d37822a3b2e6ceebbc9faa5eb06f2352bb1525 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in harman-experience (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd999dd69d40afdee7ce0c1cf9cc800d11aa4347e8fd78ea76754dfc6061dcc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...