MAL-2025-5614 Malicious code in definitelytyped-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f91b19bab731bcc203061fb348e461a3142e7c987549dac0d31e0b868a6a8027 Any computer that has this package installed or running should be considered...

MAL-2025-5598 Malicious code in @stihlus/stihl-icons-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b7a2eeaded2a276a85d303add7611ab4f65579f9d08c53712a84d46c304003d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in poseidon-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90aead430e86dd9f204e1a8db7e6adb050c5eeae8a938c3d570991ebac4c8ac4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-lokiexplore-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cc39d2244f7b9883cfc8aab3dbe6a56ff2c2fc6469f5b351b1321c1670f261f Any computer that has this package installed or running should be considered...

MAL-2025-5535 Malicious code in pyroscope-nodejs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f63660c0844969995da8de5a83535772031d00f3247e8cbb5a40addbc21a234 Any computer that has this package installed or running should be considered...

MAL-2025-5533 Malicious code in cmr-stac (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe08a482b6fd733ff90ca659985e349edbc6676e0fc5b08d34a1bbdc825075c3 Any computer that has this package installed or running should be considered...

MAL-2025-5568 Malicious code in neroxbail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daea843752c1f00a3fc0cd9f2ec9ec84c40263ca14403bb8444c4e00c6016976 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5589 Malicious code in ytdl-vol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1dd6cf64d6aa793ef6c5994096a5eec3ba42a561c6194c2f8f63a215ec42f49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5542 Malicious code in bonnet-ltd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90d8066c671e4c70fdd26ffc5ac6d901d34541c2cff4aaaf2c118c977078aec4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5556 Malicious code in frontend-building_blocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28828db7648dd2c99bf1bbda884e9f12b8f0a60ac0068a6c12e5ed0ce79cb651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5562 Malicious code in ipmi-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ae45e03814e3e6804cac4e616877eecf2a0865d1ab813e7a2a273778899bc16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5571 Malicious code in patient-appointment-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fb18be6d022e135df2a66c90067908650077628db97d427a1058b8d3877bae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in realtime-client-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949f22e5098ca5aee7073d984f9abc9e0e2fa8624224f842af24e4548844dfd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5576 Malicious code in realtime-client-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949f22e5098ca5aee7073d984f9abc9e0e2fa8624224f842af24e4548844dfd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5543 Malicious code in checkout-off-form-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2794bea0563c12742ee032a227b1f44559bcabd566aa8bdd5371569bde55ad32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5515 Malicious code in r6-info.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5776f3141e453fa085c2ea81f617610e3243fa733cbd8f54d01864a57e54247 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5517 Malicious code in react-svg-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d1b4540b7accc26da839119cb9cee8be93e168c74f00d68eb96e60241796fbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cors-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1abd9a442ac1ffe60c6124eb55921e24de7e14058f76293e8e316f69d378a734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5493 Malicious code in cors-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1abd9a442ac1ffe60c6124eb55921e24de7e14058f76293e8e316f69d378a734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5513 Malicious code in notification-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d50a72b129f2bbf4413f253f4cc198bb674e07061123d5ba873a3374ed7ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...