Malicious code in win-utils-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99d55e34bfdccef418c3d9a32fed525e724c57d61a1128d9924506b8b25200e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in textlocal-messenger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 977a0980a8abb08f4b44cafb9b81f7b9450f2323d84939a31cd020608e7ee41c Any computer that has this package installed or running should be considered...

Malicious code in @instant-postgres/neon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5998172caafd763bd9d8fc92acc7e18e96f4a14c19f5871e16257eaff6547366 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in htmlbars-inline-precompile (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c4a212f0a71820f5e5ac4def1449d454a87b95082eae0de676cc3e27006831a Any computer that has this package installed or running should be considered...

Malicious code in confluence-ui-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb63632dfb2a63f6c418382e8084ef144345f9f1ffc39d5980bacfc336cf09ab Any computer that has this package installed or running should be considered...

Malicious code in lz-evm-protocol-v2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9092435adf11e0d58f4c9c097e35aa04b9d5f234eab6b33f20ceebbd98701446 Any computer that has this package installed or running should be considered...

Malicious code in pyroscope-nodejs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f63660c0844969995da8de5a83535772031d00f3247e8cbb5a40addbc21a234 Any computer that has this package installed or running should be considered...

Malicious code in draw-with-twilio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 423b3d27265f2438de29b913385910b4d4eef30e2934306c1951196ab07f4a5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in notifications-item (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97d85b541866edfdc9a987e188439cb632fc50a8841072cc43eef2d044f30c8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in display-fetch_stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93a196cb5e04250355d4a4e51d12810d2324320559124570c03be4209dba9d1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gad-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44eb02d5baae88826b7d9e260ac54176cbfea03ea2b4fee26658a6d33c9657f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hero-tracing-placeholder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a3db765a0902f942989f3de02a4827acfff9c0c758c2feb9160b97fb2f6a921 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5491 Malicious code in cloak-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d81546f41c53f13a46b7c372cd2ac89b76c664542fb9b1652357cde5323830f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5531 Malicious code in zaranian (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc245b6b3bfbfe10a327a3d1c888f3fef4d60c69bca43b6c9653c124d9aee1ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cors-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8939034e252aec0a1bb8e90a23fa9e524d966682283a461f00204f8bedf29c33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in notification-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31994ef5ff64a19550b3e145bf17d885b0b7029e463eacfbec340db313a954f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in protos-gen-node (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b60e42ad145edc7eb0f1f70effb36918da50d55a15cc4a3d075d63c97335bfa Any computer that has this package installed or running should be considered...

Malicious code in utils-component (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2915f8670a8badcf10c91c6f4495435134004b4394050fd25077ced85b2176f Any computer that has this package installed or running should be considered...

Malicious code in secure-r007k17 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbd04d692c36ca50563b6dbb1de8053730817b3f74b9e23389dd90505621062a Any computer that has this package installed or running should be considered...

MAL-2025-5238 Malicious code in websdk-colours (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 525b4f90e12d0654f3383e01859016dab00f6bbab39b2d38eeb165bb8f09b63e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...