MAL-2025-1426 Malicious code in orangex-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e602f5938bee28a86f24337d394cf7720c3354700e633b8fb0d3ab2c13a83c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in p2pb2b-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59f7063c9fcff0127b36c127dedd6b0a9f5ea43bc5ae8534adea55a756413730 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1430 Malicious code in p2pb2b-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59f7063c9fcff0127b36c127dedd6b0a9f5ea43bc5ae8534adea55a756413730 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1429 Malicious code in p2pb2b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062b125c8cfefa321028bd1f895bead56560aa024e451572755e38ba1436d597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1411 Malicious code in digifinex-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e34f6ee680c72ebf906fbed8f3486f2646dc8d735d0b1a3f732c50eb7ac133ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1409 Malicious code in digifinex-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94c75b07e3649768c2afdcf1c973d1f5fd4025afd59b0ab2bfe606571a569748 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1444 Malicious code in telegram-bots (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce26b83a8f4eda763f723d82a057158e8b6265de39b789ca17e5d38884401cf8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1371 Malicious code in orange-meets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37037d337633f63999cc9026f347d4542faaf8a86bc78184e98a7031c17cfbe3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1363 Malicious code in gestalt-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edc35868180fe5879113537fbdce9118cb06ace84a31d55fa9268d5bc050091e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1374 Malicious code in panter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbc6c727a85e3a6b39102a212df195cab15c8cd0dd944070d41039ecb7b37455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1364 Malicious code in grammyjs-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d05f6c295e765b1889ffc72832434e365ea15f5aa6f8a6a555f42364c86a2c17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-tg-bot-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7691b80bd73d248d18ca3ab676ebf09d22c6e9702f8e80ec44aa70b3ce3ec020 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in htx-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18c05dd9781405f8a19064535fdb213fba19de58f671ed5bc64d2cf1ed95e6d7 Any computer that has this package install...

MAL-2025-1247 Malicious code in ing-feat-oct-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7aba65afd05c2120b6f0e2c022b860bf8f5dbe756920055d1726f3f0ace973a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in presto-router-webui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5755c0de7cee5665001841d934d1285ebbf706e6d3ce52299f48c4ad8b9de88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1241 Malicious code in cosmwasmjs-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 034ab0b125042454171dd648c2dd4defeec7fdb36aa9db667c7cd99922881a4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1243 Malicious code in dojo_2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9977fa53d221008b563ff81ff89bc1ebaba9b5b258a2845a3a2aa1dfbe0f302 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1259 Malicious code in slack-azure-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bd85e2ed9b4c56dd6a97f9bec08d80ee181b173bd49ba7f8bd4ea9bdbd421db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1145 Malicious code in libhash-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b2e27ca6bff082d9645b924364c7f5bba8fbfa574d7f60ffe823a7c52cda079 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bookingcom-db (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3138dcbd6afe5368c587ab12c7909b854e299087ab17fb8efd95dee23c3db44f Any computer that has this package installed or running should be considered...