Malicious code in nsubstitute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77033df9455e373b7e21f347210206adb17103822278b3d6dacaa8b69423cc7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4458 Malicious code in webmaker-sso (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1b71ddc7d061c8f7256f365a12a3d960f2fd6da0118ad1bc039beefa8387d9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in osuny (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a422d19cd1a77a3b8c8f23546a8b28a164d923cfef3b4fee3187c2bac2d8b19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4336 Malicious code in dw-api-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed08393e26202c868c689620aab8691ce9d5f8dba49ed9802cca7d75fd2bb9f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in koishi-plugin-pinhaofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30ba527f97890bef38b3c287ded03788926167b31ef67011f5bb2eed00c04b8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in koishi-plugin-majjan-nanikiri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6887f78c1033e92ccb5aab19fb7c9403c34d9136624def09f8944b43603dfdeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4367 Malicious code in koishi-plugin-pinhaofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30ba527f97890bef38b3c287ded03788926167b31ef67011f5bb2eed00c04b8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feature-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97f8b69bc45a74bab5c69310a0fa0c0cd724a8d2cb1372feef78a963a76619c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4306 Malicious code in btcjs-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6dc89984b6c5d31e37a51eac0c9ebf6c3e93d8772938d44ac1051bffbda8962 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in giftcards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 083e888f903523c6d21f467e71f0a632c66d3e3f41141fd74c5376251b1b2af8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in client-authentication-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0d83929fbddd1bff9fe89b82702a66c79d3e1f6f0fe19baa7379b58472005ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4329 Malicious code in creditkarma-us (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bba7bc1416730cab158c14c6e8071beae882a53599aafda45580844716a998a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in leaderjohn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c077df7d8c082d19789e9fcf5cd83fd4411551e54a116cf9b3a6d77f14fbe274 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4406 Malicious code in sudapam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8e9d97c10ba46bb70533810c6fb9c199b8393b1dac3acaa985ce90cec3b63fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prettier-config-rth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3baf2a5f3efec1eace5c6720887b40bd8a5019168357ff749e8eef0b03c4b2a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-rth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ada83835d1a1d917e96a39accdde75a1be468e8f7c6dffdbe72b44e9941223c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4408 Malicious code in template-vite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06fbee942dbb167dc44c38bf807a7092a1ee1f59c1852062bb2ba0e3a22bc64e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4357 Malicious code in gunbazaar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f81dff112ef1f0539df3976ffd889ed18caf335408a85b016218595bc0f577 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tgi-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dfb398d22e1b55329c8470ec5d984d35d24a20ca084875de34497095c3f4800 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4418 Malicious code in xlog-admin-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eb60334dd4f8546278e861e3dc7e4f69a46c5ed27bfe080fb6e77841fcbe4c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...