Malicious code in query-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed848ba7a41198ae72f2a0c36d31e627fe5ca7503bae293fe204e3a3dff65620 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6341 Malicious code in react-stylizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 812122411d8ab81ce837c1af7272056e2f1dd88b413f290021a615d5ad03524e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6346 Malicious code in vite-postcss-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31b1ae9dbf2d4d4b83a07e7c8d7d340507e18144308970a7cd81c1c6e5dc125f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fast-todo-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e463847c2b9e6ff287b0862f66d4845c4452d8f4508ee7a298c99fccec9ca00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6330 Malicious code in @ai0x1337/budoux-extension (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d38d31eabaa7910f5de7238778b4b935f2369b2ffed9315c03e0a03d6171959 Any computer that has this package installed or running should be considered...

MAL-2025-6334 Malicious code in style-postprocessor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25f023d8b7876e055cebe61a886a5fea11ea9b7c8eaeda3468cc1b18e27dfbe1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solhint-plugin-lido-csm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e1653573c57f50f3e9d72fc8293e9051133742e8ea749ca7dda26c7eb89375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6333 Malicious code in solhint-plugin-lido-csm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e1653573c57f50f3e9d72fc8293e9051133742e8ea749ca7dda26c7eb89375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6335 Malicious code in uidraftism (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57170f8a04ef1c34750c5fb4781b9af9071ce8936e4a5fc61225e5919acecf36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for CVE-2025-54313

cve-2025-54313 Checks projects for compromised packages, suspi...

MAL-2025-6273 Malicious code in airbnb-booking (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76c83cf952a70005332c86b068da928bd1375aeaef2702a8c61be6af4aa24e94 Any computer that has this package installed or running should be considered...

MAL-2025-6318 Malicious code in testinghs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9769d7e7fcf228fd4f1667968ced173bd9ba1ea9f2476bd11055f71c461b832 Any computer that has this package installed or running should be considered...

Malicious code in testinghs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9769d7e7fcf228fd4f1667968ced173bd9ba1ea9f2476bd11055f71c461b832 Any computer that has this package installed or running should be considered...

Malicious code in react-server-dom-turbopack-experimental (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 919b44a54d192c9600403c1ad155e8d4c1652c00f211b52d40f3b61893419ba9 Any computer that has this package installed or running should be considered...

MAL-2025-6304 Malicious code in react-server-dom-turbopack-experimental (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 919b44a54d192c9600403c1ad155e8d4c1652c00f211b52d40f3b61893419ba9 Any computer that has this package installed or running should be considered...

Malicious code in scheduler-experimental-builtin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5c381d132dddf957ca46bcbb357f4d138089323733e00e65f2e13d7ac84fc23 Any computer that has this package installed or running should be considered...

MAL-2025-6309 Malicious code in scheduler-experimental-builtin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5c381d132dddf957ca46bcbb357f4d138089323733e00e65f2e13d7ac84fc23 Any computer that has this package installed or running should be considered...

MAL-2025-6305 Malicious code in react-server-dom-webpack-experimental (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2a08db68343b79c1eb43cde87320c0f9ebf1ad3ab6a4501cc1561d4bc247a94 Any computer that has this package installed or running should be considered...

MAL-2025-6236 Malicious code in grafana-config-pipeline (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24878cfe315198916799cf0320237c09a463a1ff8b50f0d5ff6bdc70ba117ca5 Any computer that has this package installed or running should be considered...

Malicious code in vitejs-plugin-react-refresh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1686bc018b42cf0146c11ecc1796ef7bad5ed0bb6b07eae4ceffd65b35f36255 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...