MAL-2025-2458 Malicious code in contaxy-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e369d55f0561aa0c1af981aea283045a266800715c8ecfdcd178cece2cc853b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2466 Malicious code in luigi-core-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11cd1d2cbf2a40d16c75ccb85355549f06a2ffc93d9cdacc4861e929cd70ae14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in digitabell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c5d081167684c62d7fb474f6eec03aa5ed6f2d1c44c68afd453502d60bf9db7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2462 Malicious code in digitabell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c5d081167684c62d7fb474f6eec03aa5ed6f2d1c44c68afd453502d60bf9db7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2452 Malicious code in @financials/ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4e926cb5ead89764d2bf06ee99599588691f94bf8e2bc5976cb73d5aa722bf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2377 Malicious code in dingpengtest-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 325da1087c6b9a78d54fd2d9d92270a587831c91eda6e1620e828bd0a9eea080 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2393 Malicious code in newland-component-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a4a9b55a483b5ec495bb5e9c06c5285932e3ff8eb091beee14345f52431123f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2433 Malicious code in winston-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9a7a8915407cab1038d31144af0dc322ca271f4ddcd30cbf0e040dccc9b7dca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2367 Malicious code in ccl-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77543cbed6bdb137b5e93b7486f57878a169ecb0f6ad75b0ff9a58c760f103f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2427 Malicious code in tsl-select-trigger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072755e39bd14b6660b02fdc071fceedf4d4cf76f4f27561b12b19a8fa70f135 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2429 Malicious code in user-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8193a8f2fe2711193c348748cc627a0d0be2868b586830abaf1fe5b94d867c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2384 Malicious code in fnd-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2bd94b1bacafc118701343fd0538943fa1b8d0f44cb6e2418ff9feb47ab171e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2420 Malicious code in tfjs-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f988d82286807268077d9806410b6edfd3fa135a38f79f948a3e293d9e9ebf40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2374 Malicious code in digits-electron-src (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cbfd2aa51f6d4ff7a9bc75c482e5fde9d3f100b1f911d8f55dbc642696897aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elementor-hello-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3dcf5dc0f88c313bcb767622f9a1e9e169099597b2e519c7c3df4bc25c8d799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2428 Malicious code in twilio-live-interactive-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb819962cfddb983c485e717fc3534c75a8456d54560370076ca75474df33cc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2352 Malicious code in @sheingroup/justakiss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcd17fcad0f2896dfc1a21c4b0e65d0db6a1deae574d2ee5f8a51b31309b3290 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2418 Malicious code in superdope (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9abd6ad5a2ad3503841de7c5ecf7e733d3b98b26b025f093b39f0424bc78fab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2309 Malicious code in event-handle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80089375c8962bc9b14ecf6eea6f7f669f3235efadc86a11dc4a601ea24b8581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in malwaretesting1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dfabd3ff2ac6ca412b085988e3c2afdc4d44178dba2cfa134d851c159ccb7f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...