MAL-2025-47036 Malicious code in @liquid-web/interceptors (npm)

The package @liquid-web/interceptors was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab7a1c47c538682d6263db28f68b16539bd0b759d77d715766652c07ad79c1b4 Any computer that has this package installed or running should be considered...

Malicious code in @liquid-web/external-cards (npm)

The package @liquid-web/external-cards was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72e81420d5a4cb08f13be05af2ffed94d4b7620b4724b99be90886fe07e7d39e Any computer that has this package installed or running should be considered...

MAL-2025-47040 Malicious code in @liquid-web/utils (npm)

The package @liquid-web/utils was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02e29a386f30eacfd4a3e7023262f0bb759557fb0a41790632720ff54b920a8d Any computer that has this package installed or running should be considered fully...

Malicious code in @liquid-web/services (npm)

The package @liquid-web/services was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a793462c570f450eeff1a98416d2df40454d98c04a1a28a4c230f7e55dca690d Any computer that has this package installed or running should be considered fully...

MAL-2025-47035 Malicious code in @liquid-web/guards (npm)

The package @liquid-web/guards was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff39fb3d64f126121b204db1daa7ccf8738a1cc5d70406735a1a9fab3e983691 Any computer that has this package installed or running should be considered fully...

MAL-2025-47038 Malicious code in @liquid-web/models (npm)

The package @liquid-web/models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94c4dab8510635c784a7216857ef9d389224b338150feaf297bbb75eb824bdcf Any computer that has this package installed or running should be considered fully...

MAL-2025-47008 Malicious code in @js-to-lua/lua-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ddfe717b22bb57e4e1887887c45646abfa625e1d566049a635b86193170cdf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47005 Malicious code in @js-to-lua/fast-follow-commands (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df9453e1ee97636a2ab1a62d9eed556436a2d9c1cd5a551571468cbe3d4e4d93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arjvg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cd64f189589f89a129472b58fe6cdad30ec47b3cbbefc805f31d335ed8cac98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsexports-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3faa85960d0da372c3591bd8e6336208f04090cc24ca88b734d8e84d5f389c16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47015 Malicious code in checking-ips (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 941a9d77f27a5cf03000409003dc26dc454bbdfe54ff4e4bdcd72c5184e45263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in x-session-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 656368dae017043edc5b926e1ca7ff9f6e3526b8de21a92a3ce573d70d89ba07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47024 Malicious code in xml-request-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21f1d42d43604327ee124527dd04dcb37f13b0d2c46a4f2dc3e3764c7b2000bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-with-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b89eccbd26574ef7afdd79f2a415ff32ea562f29d8e293207973cd1cc50309d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-test-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3552cfd630fb30cd112a4c9ff8987f36a6de0941482cd2cb33abc0f7c43819c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47022 Malicious code in typed-fp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88f85e49a74e33182eff1c027ccaaf86058d9983e9a07c0e35d1fbdaa896edb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47017 Malicious code in image_classification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33e5c05f2c70291fde5a4ace56b3aa015c8c407695c02395a9a4336285e964a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47021 Malicious code in rushstack-lockfile-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ab388958610beed90f3054ac980a3e187917b93ec99f6f75cbeeff5c3f5dbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @magda/semantic-indexer-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020b70c247fbc09223610616ef9c39ce27218404bff50de29b8a28706679fc14 @magda/semantic-indexer-sdk ships a minified dist/index.js bundle for a Magda semantic-indexer SDK. Static keyword patterns fired on the co-occurrenc...

MAL-2025-47009 Malicious code in @magda/semantic-indexer-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020b70c247fbc09223610616ef9c39ce27218404bff50de29b8a28706679fc14 @magda/semantic-indexer-sdk ships a minified dist/index.js bundle for a Magda semantic-indexer SDK. Static keyword patterns fired on the co-occurrenc...