MAL-2025-5506 Malicious code in nava-clone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74fb4caf6f9420831f8001a0382c3a357186529a0cf6e822e884eeaa90182ac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5518 Malicious code in root-direct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a3898ab593ffa99617da9a63938d10ebe716d857a81f756bac1b9465911abe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mod-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13965717642c4230905666118685f8751f2e81b8749c99163d74f840204a3a95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5528 Malicious code in viryc-hsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c7e65fbc4460da9aef8938e77b5ffc7aeb72d879e43d1062a2ebc211d39eed5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5490 Malicious code in canvas-chache-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53cd51cc0d4949d913a5bc2368bc95601e8e8402591ad46084396646e4f75149 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5525 Malicious code in very-zeld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec45b5cdcc59c7f8b7328486d203c3f448f7e43d5fdbcdd1ebecf25b6fb072f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5508 Malicious code in node-pkg-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6df8ca0c98ea357d77cecd453a9b679670af19bad2830fd82ee7cc85813b239c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5509 Malicious code in node-pretier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7de0fd2da3988016711f12d165ab5e9d22cf17a815aaeed0966944b96151dda5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5526 Malicious code in veynlinh-sky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdb6b2d752cc5210fe846e1420ea6448235027e9ba0b87b2380cb75b85aa66f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5527 Malicious code in viry-nexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ddb7e05fc484a43e52418729448927f385a1c81ea57c1892e47eaf5fd1dac88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in veynlinh-sky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdb6b2d752cc5210fe846e1420ea6448235027e9ba0b87b2380cb75b85aa66f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonlogs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de467478eb6a14c26e0545351ab7bf4545a3a66b145512c0b8babc5b8b3a51eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5502 Malicious code in jsonlogs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de467478eb6a14c26e0545351ab7bf4545a3a66b145512c0b8babc5b8b3a51eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsontostr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9832cb28fc647fdcf35338f8d57a33f01e646c3e94426c79f0a5b3962ebacfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in byaziine_validator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f12a2c76230f3f02e4f5f0e1b7124c3fcdafddd9b28e6083e61b3c2a92f96eb Any computer that has this package installed or running should be considered...

MAL-2025-5407 Malicious code in example-target-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c527df8a6a7f920a0fd9146bf4a738da075f6430ad4a523d1c345fe4deb26b7 Any computer that has this package installed or running should be considered...

Malicious code in action_dropdown (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa59d258b8e3e32c53b3c209203176ea50eabf29b16767fe69cb055147503799 Any computer that has this package installed or running should be considered...

Malicious code in sizings (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 393af076bb3b03dbc0a98992d0876a85e7b2cea1450e48e012de0ba71943f8b5 Any computer that has this package installed or running should be considered...

Malicious code in titan-exchange-shared (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcbcec353cd72f56bcc238f2996606b61523a85e851d694e96012a54c027f606 Any computer that has this package installed or running should be considered...

Malicious code in ardiffact (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f622f1802cccc6f5386792e6d91d4e4292e5f4f601a2662f451ec82db6fffc Any computer that has this package installed or running should be considered...