MAL-2025-5866 Malicious code in @cpce/console-sub-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0e227ba31b179597ff26830a069bf360d8ce9ea5fe6ec81f517bd159dbb5d10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5882 Malicious code in @vapc-ui/search-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0da3194dfccd7f133907c4365b33fd21321477bd320e54e9115a90f0076ece9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5877 Malicious code in @indigo-mobile/material (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2503d344724b3360dc4c2d74aa730e700f9555ffddba341a9d7fc88361b184a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @indigo-web/material (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97079bfe959e2a931df0187447b063d5c5fc0998cf573097f9fb9fb36105d6a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5878 Malicious code in @indigo-multi/fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d045fe7886437131a39046affffbb0dce279fbc6abb9975753462f4c3309edd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5970 Malicious code in vitejs-plugin-refresh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 243a4e663f29ec03aed634b87165dccaf6f345b2e1c92479b95ef6fd28474ba5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5943 Malicious code in notifier-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c838abd608c5a94498f447a0d0421c940e32b2216a2b6357a45742c5dc29fc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in themeone-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17ebc64d4990db35ad6d321dbbff948ef76f999ca0a2e279f26644a32f0abdc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-router-cool-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f8cdbad7d217500262088af80552709596ed86e414e2a6c3214b5a40efb8057 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5922 Malicious code in heronumberone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44a7cf88992d75a43166e394a0faf68a3147180bab83bb0c6358bc6f64301ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5962 Malicious code in themeone-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17ebc64d4990db35ad6d321dbbff948ef76f999ca0a2e279f26644a32f0abdc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in finactivitiy-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40384a252c4486d358490b425b64817feac8db7c370887b9296e81d4c2d3ac51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5955 Malicious code in shardeum-json-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac467fd35bd9312b691bb92f0e8b7fa7658031ed548664e1676022ec8cae3713 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5913 Malicious code in finactivitiy-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40384a252c4486d358490b425b64817feac8db7c370887b9296e81d4c2d3ac51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypto-com-developer-platform-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3ba03d0d0285dec410f541b8e7fb12a809792658d08b88105efe3ecf507350b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shardeum-json-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac467fd35bd9312b691bb92f0e8b7fa7658031ed548664e1676022ec8cae3713 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in codecops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d42dbe570a6f14ccdfa5bdc48c64201847ef6414ea612b8f0a0dc6e6a0327ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in js-0.8.3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476e6142baf13923d3fdcbbfce1ea57ab2f62bf72a7c190d3213bbfa78364bfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5931 Malicious code in jss-0.8.4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46d8111edf0983ef24837eb9f58a2a819f4c99f34a3243fddf898c0e4588f01e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bombora (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c027bdb1bc55b07a5f9c2c6ffbb94c9842ba4bcc238041e873cbfe31ef4832d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...