MAL-2025-105 Malicious code in turbiniactl-status (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc6838ef6d1c417a8e9148ecdf2b867dd4d49d6ffdfe1fc0f232917572a79d5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-103 Malicious code in testin-elengosee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec5deac0188f700e1537b6812c80b7dafdc502d35714eb1c32cc371115dfeb67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-111 Malicious code in web-prototyping-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a14e26877ba590485f30ac33a914cfaa213c85de0503b2ff68bd4d9debc5e0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-108 Malicious code in uber-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fa7ffb884674d60abc64c70868821ad5ddf53d08897d0b90570c2d47ad780f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-98 Malicious code in probeiaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1a8f77ab2bd2d14abfe12b4f07337fbac0421987ca6f3b949aae30d9ebb443b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-101 Malicious code in test-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cec52cb9100577a26a92a2e1e8965ef19244433a5a69078d2660fe96274c5199 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-92 Malicious code in inspector-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de7dcf1a1dc869f5887ce7985e9cd00928aa23e5b231df8bc32f1b127b51c33b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-99 Malicious code in reactnativecreativekitdemoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d947fc579794653736a44c851146ddc7e503173b00e1b3adf67c00ba851c5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-91 Malicious code in gha-update-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ebbdc2047d61c22672a9c4ccd50a29ebd7cc57bb3617aeb9ef883efa027d449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-115 Malicious code in zqdl55512 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b40b6aca34ba0026d6cf9dad59b5813350453a235dd0b90b75e9651031e6c53f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-117 Malicious code in zqdl555147 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 693d5fb68a0482e2a08e2c899197a6285de97aedbe87242e1201f898db550685 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-97 Malicious code in prettier-s (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a842b20c0aace9294c3d0326e85547c5bdf27e25347c8d744845f95f8d1374 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in build-stuff (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b7ff7f3b5a1ee73432fc3f1ace509ffe1fcb48099ecca9aa87e0396fab2a7f8 Any computer that has this package install...

Expired Domains Allowed Control Over 4,000 Backdoors on Compromised Systems

No less than 4,000 unique web backdoors previously deployed by various threat actors have been hijacked by taking control of abandoned and expired infrastructure for as little as $20 per domain. Cybersecurity company watchTowr Labs said it pulled off the operation by registering over 40 domain...

Malicious code in dexscreener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 294308d3c6b462aa1ed7e43894f66f1fefe347cc188fd9a360649f1c03b0fffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @swiggy-private/dls-web-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 866e9fd01cfe3133ef1ad9f34a13b577f9296d283c389de22605e996c5ff2de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12140 Malicious code in centers-of-excellence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db7470e26934fe6244d0a4418e105a9007fb9f8357f17951f481193ce6a0888f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sovryn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9da07494d6a7ce1406279823cdf09c1df8929ee54b5aac154cab1aa46f235552 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in launchpad6-dev-ops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a30c80c00a3a3fff99c7e886c9aa19aa90f914ed903e9039de87952a37921e18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aem-react-spa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54bb39f84add565409123e2afb033f2b001ab42f9fde0cdb31e4927d222e1419 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...