Malicious code in i-just-f-hate-bananas-plz-dont-mind (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed1ddc36f47ef52c0cb79e772a23bbc635d435ea0029cddcc4ba60ea0a6ced5e Any computer that has this package installed or running should be considered...

MAL-2025-5417 Malicious code in i-just-f-hate-bananas-plz-dont-mind (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed1ddc36f47ef52c0cb79e772a23bbc635d435ea0029cddcc4ba60ea0a6ced5e Any computer that has this package installed or running should be considered...

MAL-2025-5370 Malicious code in bootstrap-modules (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a45d845a42d64eb0f9732d82ec558f52eed95f2e905ffec7f0ae2849f78104e1 Any computer that has this package installed or running should be considered...

New Stealthy Remcos Malware Campaigns Target Businesses and Schools

Forcepoint's X-Labs reveals Remcos malware using new tricky phishing emails from compromised accounts and advanced evasion techniques like…...

Malicious code in core_filters (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0388fabeab56d72e90650b3865adb97acc2f6b4fa3605a8053feb33282554bdc Any computer that has this package installed or running should be considered...

MAL-2025-5386 Malicious code in core_filters (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0388fabeab56d72e90650b3865adb97acc2f6b4fa3605a8053feb33282554bdc Any computer that has this package installed or running should be considered...

Malicious code in cf-install (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13bf383febbfbe211ef3966d1f7449a4bc3e6dafb727078945f859a53298a12c Any computer that has this package installed or running should be considered...

Malicious code in styled-components-react18-v5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66d52b4bf89a840fc85060c046eff8faa5d258a0e3d47a52abf3c7b522ca1762 Any computer that has this package installed or running should be considered...

MAL-2025-5449 Malicious code in phantom-sdk-monorepo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64a02da8340505757389af71a4289fd4f3fd0825fdfcb80ecf3a848d8c3c6db0 Any computer that has this package installed or running should be considered...

Malicious code in phantom-sdk-monorepo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64a02da8340505757389af71a4289fd4f3fd0825fdfcb80ecf3a848d8c3c6db0 Any computer that has this package installed or running should be considered...

Malicious code in react-plaid-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e5a7cd6740a8b92b5b0c681bce252fd1850ace8501de899aea496321176c95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonspack-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db4dbc8297eb8e4503c9ff7b14f7d6f1a5eace47e3abb92fb8f6cc986913a38b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sumsub-node-websdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0f130a771df580704e11f7b16a38ff74d7630406d6acd868819477435c331e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5282 Malicious code in jsonspack-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db4dbc8297eb8e4503c9ff7b14f7d6f1a5eace47e3abb92fb8f6cc986913a38b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5289 Malicious code in sumsub-node-websdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0f130a771df580704e11f7b16a38ff74d7630406d6acd868819477435c331e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5281 Malicious code in json-webhooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 776d1361c31fc0cb7ceb907404e53747cde097dab00614dafac0820111281ad9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in masons-chat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14b2f219e65b904ce4942da955e90e752927f635e650295337be7bc2eedfaf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in confluence-macro-browser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d10c6adb7b55791217a6bf6c9112897e38df535e743dfc1d85f285adbcb03a08 Any computer that has this package installed or running should be considered...

MAL-2025-5382 Malicious code in confluence-macro-browser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d10c6adb7b55791217a6bf6c9112897e38df535e743dfc1d85f285adbcb03a08 Any computer that has this package installed or running should be considered...

Malicious code in utils-component (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2915f8670a8badcf10c91c6f4495435134004b4394050fd25077ced85b2176f Any computer that has this package installed or running should be considered...