MAL-2025-1170 Malicious code in pulumi-automation-sdk-ssh-tunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffa176b4dcf4483a947e659d4d4855bd174744d67a8ed98dadb4ddd425e41ea6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1175 Malicious code in sg_personal_ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6af0cb60de927dce01894374e1ee9541828c4fbef00917a909bbeed4275a817b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1188 Malicious code in type-fs-extra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d936b4b50723729f923e7728c1169f52f73b0fe7b8f064f29aa9d66ec0937054 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npm-website-example (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93da080821140bce6e36bb1c02a83b3d84c25e137e7d71595fad19f4a7dc2508 Any computer that has this package installed or running should be considered...

Malicious code in common-test-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 461213ab0829aa9518db4d8793b4a1fdfd4b3bd6971f9bbd126d558e4f96b953 Any computer that has this package installed or running should be considered...

Malicious code in coinbase-wallet-history-frontend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d08d31db0cc340bc756367876047e8d77f4e57cfd409444ec8a9bdf1c08a71e5 Any computer that has this package installed or running should be considered...

Malicious code in gateway-eth-ts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b62b42384dda97a32401608b1d3852453885ac3bdcec2ecf4bc6a09299b4d8c7 Any computer that has this package installed or running should be considered...

MAL-2025-575 Malicious code in ig-lighthouse-security-audits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 226acd90be6fefc4cd12da9d6b73604ee919205ed49e1e44f5d336b5576c3717 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-361 Malicious code in equipment-icon-mapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a99f570aa2c31d84f2b2e487af42792418ce952fac2bc39d603ad1899f27230f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-366 Malicious code in testyyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82bc94189a84151717881b2111100b84166cfede990cd122a895d3f2316508d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-334 Malicious code in fix-this (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ff8667daee572e58927eeaf0225c295d5a3c95eaa66def24cb25a4efccdb385 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-341 Malicious code in octuple (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0a813e1acd2a14c310cbf3dc20cc0b0fbc8e2f5b6063887fee20f70e177153a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-346 Malicious code in telegramclients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44c77bd3fa6630e7c9766fd7aff1c52888620a548b6f827495df3fed97daed49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-333 Malicious code in dynatrace_config_manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a8f0e753dc778e5f7193c11f8e1051da139ce2d2322f0b7c678e0aec6d11746 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdk-coin-algo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ea750c35c4bec1006a22374fd7f8e5a426522380aa5d0566f1c97875ad977b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plans-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04b1c05ad3cb73c09f30ded556f336a88920f11ce91cba56ad301b3dd88ffd21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in viewport-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 267002a03c6d919765b3d26bea4ac822e509a4829c59b075764cecf051da4722 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-306 Malicious code in sdk-coin-avaxp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ee94cfa5a5aa6b22e135137520e3b26398c9d013a5405d3240f7b3948507005 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in design-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7a60ac481f3005406c24eaaf2970a7d6d349201ce49fed87277a9436b52bddc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-301 Malicious code in popup-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf12287bc6bc8081a72eebd8ef2caea2807d4875c6a3a4f65648d9e61125ef4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...