MAL-2025-288 Malicious code in create-calypso-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df093bf0b3032586592d593a554c740ebe09f794cffc403f26b07319dd426d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-293 Malicious code in domain-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14a682b54ff19305a641790fc1f96d99a5a4dab9277d7796627d1c34f6d80bac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-311 Malicious code in sdk-coin-btc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ae32f6f4577bb9bc54269aa0b6e1c46e849d1a36823c0cdea862d5eea40b5c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-301 Malicious code in popup-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf12287bc6bc8081a72eebd8ef2caea2807d4875c6a3a4f65648d9e61125ef4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-302 Malicious code in request-external-access (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf57b443887e773384068e114f407f70b10c0278c6839c0d5c34f2ba575a63a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-297 Malicious code in ezcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14686eb8b73cb1b789f94e4e58993478025e236c7e9fafeeda25a073b1a7760e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-226 Malicious code in prem-fb-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fbb6df275aa4fd3a58792cb72b230546beeaa2fe12aae5f63ed5d516907fdf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prem-ig-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06c4a6771ffd4d3e9e4aa7f3e6c28ae1761be07ad176869dac7a5067d9d9378c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-232 Malicious code in prem_.status (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 211f307dad504f583168502f1e61e0edd3318a06791b8e481b0967452d78495e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-228 Malicious code in prem-instagram (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7546364925ac5bc237fd230e46a4710450fb09b9c34f98c5d8fe0f969dd358c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-262 Malicious code in zapier-platform-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d31d0615813f82b8b9c9c67647a525eec158961e10cd91db9b2e781d2cc2f9e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-207 Malicious code in mintapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5484db8a5d618c5ab7e297e7b256b682dfc366dbf8955c4ed4ef66972ba7ed64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-189 Malicious code in flutter_inappwebview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 394e259ceac6eb2a72e92a5882933facc39e1ad19e0bf1a6b908a92ce115a28f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-175 Malicious code in contrast-local-scan-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 652706a3541c937da40c2dbeb200974a14635810d37d52b07ae884e52530c6c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-186 Malicious code in eslint-plugin-paste-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7b4e70800026ad3cf2470622a7395db0d5a043654e45122e8ce535555604dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-259 Malicious code in wc-skroutz-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 438709bf1de713b9fab756841aa4cba87bbfc22133ff796cb5ee46dcc8776d44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-206 Malicious code in matic-child-subgraphs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 085980a7e031404b3267eff3f19584b087b5ce5329ce9fa17265b00ef3ea2f9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-201 Malicious code in lib-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fe973aa7a191c3af7d728aa84fd8833989b5b4fa4cbb18ffff5595f890fa540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-167 Malicious code in bc-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ca742de853894958cf8e34ed10d1e17d9584d7b71e3513b533c66a7a207067 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-165 Malicious code in bbc-http-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 607310f08b0c054bccf0fd5902e86de74b458d5c11110bdb411ac30b04c0db95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...