MAL-2025-5786 Malicious code in k6-studio-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 066503bf35690fb58f38fa44cc7e64d0eaf5a0e5f352167029b6a5ed00a448b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5767 Malicious code in clock-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94f232d3ca0a55cee4a30418e75111d62c8ce4b44baa018c72400b9aee310ab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nmig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6e6f1ec1132797f243edb4d2c3283331fbc9e71087b281dac1b1bd42dbb9a52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in imx-core-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b225b1b325c51ba41a89cf6d4a59cf1ea2451ddd7c224330962c43ff364d8cfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-csv-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9ad716a5ea97debbbad7d3b10d1b4a28c71a2e2b1143a6733443cc211de350f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5782 Malicious code in imx-core-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b225b1b325c51ba41a89cf6d4a59cf1ea2451ddd7c224330962c43ff364d8cfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5765 Malicious code in azure-prometheus-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47fd9dad2205644dc2dc1629b5ba8933f2243510d26fca0bb35e2fb3f1e602a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5773 Malicious code in dt-internal-linter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5c720ae7505ae2c4d74c0ce8cea7fdb4961f4de5c0fddc8c485c7b66c87097d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nomicsfoundation/web3-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8be3c236328576fc8bb353a6101fbbf35e483b67f019623f8d2f7538898b568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nomicsfoundation/sdk-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd1a561b2ed5703af862c67f4c412afa3ba942efe78ee0b7fc55066fc7c8c316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in win-utils-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99d55e34bfdccef418c3d9a32fed525e724c57d61a1128d9924506b8b25200e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5753 Malicious code in win-utils-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99d55e34bfdccef418c3d9a32fed525e724c57d61a1128d9924506b8b25200e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jwoiesk11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8272ab239b8e1ffc477bd4ffb90538ddeb7d1cd11f6bba6b8ee8a396aeafdb61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5751 Malicious code in jwoiesk11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8272ab239b8e1ffc477bd4ffb90538ddeb7d1cd11f6bba6b8ee8a396aeafdb61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in homiersla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18b688a5a2d22b21d1e643d311c8364a0d6d26d28c537c6e4fbf1a00f7dc12ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dashboard-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d421eea33f3a5072db15cff1f0c190af64dc4e7d8963bb2eb8a32d6ac855945d Any computer that has this package installed or running should be considered...

Malicious code in oneapi-environment-configurator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b59cc2d584cc83aeb72d1b1e463e2f4423a81b86d2fa4b7a2bdcf7867bba348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-json-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0df63e5033b70f866f957f8443b533f09684b459897700f9ed44542d23b8fe82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-iot-sitewise-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97ddf55083335c582abfc892f9b5d93c8b5ee5232f0fa07ae4da45dd8eadc84b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5713 Malicious code in oneapi-environment-configurator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b59cc2d584cc83aeb72d1b1e463e2f4423a81b86d2fa4b7a2bdcf7867bba348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...