Malicious code in solhint-plugin-lido-csm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e1653573c57f50f3e9d72fc8293e9051133742e8ea749ca7dda26c7eb89375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-server-dom-turbopack-experimental (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 919b44a54d192c9600403c1ad155e8d4c1652c00f211b52d40f3b61893419ba9 Any computer that has this package installed or running should be considered...

MAL-2025-6246 Malicious code in preset-classic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c8120ab1c8e211545c22d69165ccd550b96bd77fa18731c412d73f2c2a36640 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tnet-dps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45ed1abbbf74a45b20d6fc72505538baf442bd7dc2879cf8958b815f12ccde79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bingo-abstract-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c453cfd4d38bc70b9b47a64bb81b2c3c982b8811f3fefe95b1788b5a24340808 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bingo-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db9cd7f456a7e51d21294046604654fa4f3ec5b9ee11c7acd713ab08ad6838da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6218 Malicious code in durilka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30237df1aa52d87c76f60c6ff031ed2283d3324ceb3a3d2aee7fb3a7d5788c1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chime-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c47d81929483a169d2ee7d4f0f5c08d14518a52a1efa368fc87e2101bd75de5 Any computer that has this package installed or running should be considered...

Malicious code in adspaces (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98bf52674bcffb7dfa7f1020507c064e580e45c09a87f5e02f704b35893b0ae2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodemailer-enhancer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc9c43546534172092180b5eb7cb00ad4bde99ac2caf6be2215bcdc3c17a1852 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6181 Malicious code in mydealer-content-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9da35bc1c296ca992821d1f1281d06c374f7f4c286a9fabd69faec84e55cb902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6167 Malicious code in internallib_v687 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6318396222e5333ad64494337976e8a02c2b768d761e3cc59c41dcfb18e57570 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6203 Malicious code in tfjs-vis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d519221dc58e4fd7327b4001cac9971d4a4e5187c9cb10dfcffe63b32e282427 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6155 Malicious code in community-pass-react-native-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45d465e1a0ba3936c02d875635041ba0362e96dee19c7f7d727391a4bdcb5dc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6187 Malicious code in nf-graph-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68c85cb3b4e04f7e1368dde1be75808c76da67cc6c23f52ed008ac697722496a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rc-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5638d1bfc139a2ee01491c7afc44cf724fd4b1f7022fbf78bf9430a2cc3f236 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-hook-form-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7bbb033f9045b94810312d6c18ca8a53e34b6886863c10eaf2521f35349775c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5911 Malicious code in enterprise-stencil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1e61d1ede34eeeb27d8845dbec391e8cc88fa906714cb1df64392d9332f46ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5977 Malicious code in worldapp-fe-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fad2c4c3d30ab00bfd237b6e51443fe6108d11439361d023876477d325a5e8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloud-binary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cbe7d6cc6be5cf0a2d185309e6f0adc10eaeb825f7177874f19cbb09a6ed7e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...