MAL-2025-47528 Malicious code in @sev-ui-verse/authentication (npm)

The package @sev-ui-verse/authentication was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3492bfe4d8b65a2239adf76adf321c36a385fe94efabe1ef8f1ad32b6c262b30 Any computer that has this package installed or running should be considere...

MAL-2025-47545 Malicious code in @sev-ui-verse/react-query-utils (npm)

The package @sev-ui-verse/react-query-utils was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7159ac6527ad39a63e64403ef1ba63e8895558c89c17cf8355a6bfee386a761 Any computer that has this package installed or running should be...

Malicious code in @sev-ui-verse/authentication (npm)

The package @sev-ui-verse/authentication was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3492bfe4d8b65a2239adf76adf321c36a385fe94efabe1ef8f1ad32b6c262b30 Any computer that has this package installed or running should be considere...

MAL-2025-47533 Malicious code in @sev-ui-verse/core-models (npm)

The package @sev-ui-verse/core-models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 794fcad76f90e38dc1872c555e02d03512701d4d3a3ffc2a932ce9421fa1de97 Any computer that has this package installed or running should be considered...

Malicious code in postman-json (npm)

The package postman-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63e81e735aa1583841441847e7de0a269d581efabcfdcdac7cb7d6afd64df258 Any computer that has this package installed or running should be considered fully...

MAL-2025-47566 Malicious code in postman-json (npm)

The package postman-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63e81e735aa1583841441847e7de0a269d581efabcfdcdac7cb7d6afd64df258 Any computer that has this package installed or running should be considered fully...

MAL-2025-47553 Malicious code in envs-loader (npm)

The package envs-loader was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94802ccdee601e77ff6361593b03ef5b414dec7eaeccd58d8ed6b2305886b27d Any computer that has this package installed or running should be considered fully...

MAL-2025-47560 Malicious code in internallib_v714 (npm)

The package internallibv714 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949e0eb9d0a4f2ce9f9738485e24ab728066c412cd31cbc7445910a5e2709571 Any computer that has this package installed or running should be considered fully...

Malicious code in internallib_v354 (npm)

The package internallibv354 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fe6620f0f8ef12778be7f072b28dc3549b66d2db5da15e09040ba641a14d357 Any computer that has this package installed or running should be considered fully...

MAL-2025-47557 Malicious code in internallib_v249 (npm)

The package internallibv249 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bfc2ee2f10bc7dbcd77e6d27b549eb1055695fcb4b3cd0940acd02e6b679429 Any computer that has this package installed or running should be considered fully...

MAL-2025-47559 Malicious code in internallib_v606 (npm)

The package internallibv606 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b6c06c560ee88f500df3ba003383f74ab623b5238ca2ac63523d552673de2bd Any computer that has this package installed or running should be considered fully...

Malicious code in notmall (npm)

The package notmall was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4d32e62a0f50bec8aa915cd7b380add6d32de407308c006baf294bf0865b194 Any computer that has this package installed or running should be considered fully compromised...

CVE-2025-9966

Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

Malicious code in sha256-validation-xyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d087a7f065c7d1c6612320e8fc3d19957b0768a27ea56d1c6849c32193941829 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in isood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95552c81d5afcf7c02c3015baf503fa6c6fd1e22457eb2ac421aec6353dd50da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47517 Malicious code in axcors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd0eba62db81955f4554b13c6ed9952f71d3c0d594ef9c1f833220b63495b6aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-9966

Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

Our plan for a more secure npm supply chain

Open source software is the bedrock of the modern software industry. Its collaborative nature and vast ecosystem empower developers worldwide, driving efficiency and progress at an unprecedented scale. This scale also presents unique vulnerabilities that are continually tested and under attack by...

MAL-2025-47485 Malicious code in http-err-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a2e55871b065fdb7fedf48404b81400a55e30b5682d2f1f52f4518ef24058b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in http-err-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a2e55871b065fdb7fedf48404b81400a55e30b5682d2f1f52f4518ef24058b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...