MAL-2025-48891 Malicious code in final-osint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e4fd0b958714b427b2b2c39e7afd8134f71fae10467ce32d52cffeb74ec716c2 Importing the module starts an infostealer exfiltrating e.g. browser data --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealer...

Malicious code in opti-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bcfff1ad4de721407b3ce0692487bff570b6b427913b38ce128fb6e4f744c03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47506 Malicious code in tsleep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed66f2b93e98b57d021fd0653e70765b4b209fdcd11df8fc84d9ef9081c32b97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-mouse-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c878282ff4bbb3aef14ffb5e31963987ccfe6f981778c39c7e696435ee7422e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-desktop-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 499aa4b2704334334941cc6f69986a5c31488867b97fa544ce2927ce5d5a7bfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47503 Malicious code in tailwind-glass-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba68ec55869f324e11415be61a3a4240222a1807115709dc91804e63fad98452 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47502 Malicious code in tailwind-desktop-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 499aa4b2704334334941cc6f69986a5c31488867b97fa544ce2927ce5d5a7bfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-classes-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3533ded19e56068694976a22ebcd933310fdb82d4b79857298b09a3f5e30389b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47497 Malicious code in some-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3558d5270ba6945f13c577df7f903f2e449b54435c6aa2ee46d721ef5e9ea198 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47494 Malicious code in react-fs-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af2d796ee4de90749abff951a8c96883e5fcef54fb5416b3f60a3c031fd093a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-fs-cofnig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7593b42f32f81d9208bb076f6c58f08dba424e33537c10569716c1561838c360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postcss-calc-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a126d37fa7524804ef4c161588d71e9837418138fd67c7fbd8bc775d0f78a49f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-vite-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c53bdee988880e8c288daeff8bb041022f69c78319375b597edab208129e0621 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in luma-glow-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80813446edf951ac165d71e8e56c30d45881e40776615d07d104e3e40ef1f5ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47487 Malicious code in luma-glow-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80813446edf951ac165d71e8e56c30d45881e40776615d07d104e3e40ef1f5ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47486 Malicious code in logger-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e272a479809e73e22ac57389e876150a90f12307651d65b68e075188185abc68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c532e5d9ed3c3afdaf7a4a59234c132c6176b491fc96676828c4f0dd5eb415c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47474 Malicious code in chartable-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b387b9a592b8ed553ec2f990ed3f9cf329be2772c324ac75bd78e6ba9acecfcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chartable-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b387b9a592b8ed553ec2f990ed3f9cf329be2772c324ac75bd78e6ba9acecfcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cui-travel-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28f2686ec4318061b35e9018872a2a9f3a364c77dcf26ccc1bc405d36475d8fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...