MAL-2025-3939 Malicious code in spingroup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c39f718dbb6417a92610be6705edea190e4adbccbe0a2e80ede465e0a307c917 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3963 Malicious code in dojo_10 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8917f5f3c438feb5b1106f4aa4293fabc6fa81bff53105084df9e6113f0c6c0f Any computer that has this package installed or running should be considered...

Malicious code in blahblahblah-definitely-not-a-real-package-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2200fcdc37007fa010dea283e42096c6211571af64a48492a2fe0b550a39ac62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3968 Malicious code in madddterialxtest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ade0001a744bc3e2988313f7e0ae461d922acf285bba0377b34b1c33cf54d16 Any computer that has this package installed or running should be considered...

Malicious code in driver-app-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3570e82c82a42968f9af1f2c57c421f5b73880688f83466fc4310325ecb60dff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3900 Malicious code in lcs-ui-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b66ec079f142a51c33d484015aab0384b514dca3415e27b84138f92dd2ea818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in linemtxworkloadui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bc869f0e5403668a9895197b876def013a0a60be9f956922a83a62e77c22f0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3881 Malicious code in date-min (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c85611f0d2bf7147b9f3fc95fad6c21702ef493fad36161c2e8becab150a2d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3891 Malicious code in grew-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4ee10df9b214f88ce9a202b5f7cc418a407053cc3ef0518b2751e4dbe7d06c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3874 Malicious code in beautiful-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 366a123a150cfa4f12f17cdb337ca0d39a1b8c22e7d861302e8632619e51bf4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3888 Malicious code in flexible-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ff06dde8fdb6c689a2645607380a7a1d837f2b3b3c16ba52c2bb6bc1ea69d34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3884 Malicious code in ephoto-api-faris (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ab94a5cdc5abc193f41c8ec94e6c008b88ec7e5121bfd6b73b514f6664a946f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3924 Malicious code in vsock-sdk2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87d1181c9c02b4d4e06d16cac778739608a055f903fc4b34137a5186bfcb3152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3875 Malicious code in bui-react-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7efb9896b372501d00ef7c23655b29a8eed7ffe274410cb4d2748ec4aa96eda7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3910 Malicious code in nodejs-fetch-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80749ffba9365d62c589ea0137cde9db701626ae4ba97fc9f9149b61809ac107 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3908 Malicious code in node-crypto-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d77d3f937a0c6f4071e5688241c3222eeb62c0033c93c981570e554400b14d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-crypto-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb0ae4278aeded272c00f7218890bedf1e2e9dc77d03348eb4a1afe7fa277e83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fastifiyer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3da19b8f86e82a5ab61d8134531f7e1f001bf858555808eca76c3f03deeff06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lodashing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bc06ac67ed3a5e36a05578a4914e72c57833d27babdad196f17a54c1ebea3bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3839 Malicious code in momenter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f430e51962da7f325413ad52b7f901ca944587f76401dcc9b3d30f6ab15f5d0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...