MAL-2025-48008 Malicious code in uniswappols (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05334370031b1fdd7e589e3632bb55b0f0b8514bcdb712b63eba49eef3c86e59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwindcss-config-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 274dba937d6ffacd0bbf3b592f5e43f2dabc7de66db20c54a51965617ef82807 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oxrvxaslllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ca07bc07dea87a05077e44cc62e1e153cd9d75fd15fd02382ffc42266d072e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in swagger-cli-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b8a1c500f2054b4cc2868df1b50c59128f47e0a132443910470547fbaf31bfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dotevn/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b95b9f994dbbf3a9562b73fb2a0445eb341e9e8defdf89f43a90a3398270759d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47904 Malicious code in react-device-mockup-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3997abd64511ef67ce5f8919344944698de3d8c04b73dee971d3ce6b3023493 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in next-optimized-image (npm)

The package next-optimized-image was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58dd13a9edd9b09b53a4bd0b8b6e36204d366ffc8f6e6a1b9ed3fcfc89ef9657 Any computer that has this package installed or running should be considered fully...

MAL-2025-47541 Malicious code in @sev-ui-verse/local-storage (npm)

The package @sev-ui-verse/local-storage was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5080905dc320899813f01d1c66b561c163fc638adfab5b390bdae2cac302cb7 Any computer that has this package installed or running should be considered...

Malicious code in checkout-sheet-kit-react-native (npm)

The package checkout-sheet-kit-react-native was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54397e8e5f2da7ea785328f6913d946c6a1a7daaab2b703580781f80f4e19726 Any computer that has this package installed or running should be...

MAL-2025-47531 Malicious code in @sev-ui-verse/config-service (npm)

The package @sev-ui-verse/config-service was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 188aa603d30650e09cc52a7e6d86df9d9fa9e4bce6239596a6ee4a7a75a968bf Any computer that has this package installed or running should be considere...

Malicious code in internallib_v354 (npm)

The package internallibv354 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fe6620f0f8ef12778be7f072b28dc3549b66d2db5da15e09040ba641a14d357 Any computer that has this package installed or running should be considered fully...

Malicious code in luma-glow-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80813446edf951ac165d71e8e56c30d45881e40776615d07d104e3e40ef1f5ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47472 Malicious code in @cat-ai/assistant-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d4d09d0b50027d4061df3bcfc206f5e4c96c6e1a9f67f5ce3c6e997e91507e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47465 Malicious code in internallib_v381 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e50fa16b8a33a721efa072a754b6d8bf5c3a9d981f48753a250a77ba202d1cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47394 Malicious code in capacitor-notificationhandler (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f48b8279ed29432862fc6a0e1baa55481494de62d45c143694c11b696b235e Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47323 Malicious code in kinyongi-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ea7b4bf7dc393083c0cf1a329515fe98ac756a468ace3d791c4b0f20d2448e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47363 Malicious code in xo-guest-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1517cef9707e50e928c86d5810217ee40f807230a72a4bb77e6b2176fd33ebf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pumpfun-sdk/bn-converter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06bcd5e8715873a001eadde3f34011c22ba27a599e02a712fde9f44036b62fb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonwebjstoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5866f0ff5443038e8141f9674f6d4d83ef512aba824b8a430cbd459f9dfba71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nativescript-community/ui-material-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe208e03b1176bddeb8912705cd3294928ff3009cc5c7e98d9495dfd695feea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...