MAL-2025-4929 Malicious code in thisisatestllll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2feaf463b5dc4c05046c75b03a21ba4672af2d3b4af04f3b80dc7bd9768179d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Unsafe Dependency Resolution

Overview @nx/azure-cache is an A Nx plugin which provides a Nx cache which can be self hosted on Azure Blob Storage. Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the build cache process. An attacker can inject compromised artifacts into trusted production...

MAL-2025-4793 Malicious code in lichess-db (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 475d752d815f7e78b4625da2eea3b8f39eab9a81a1fd93dd56d2d3aab31c379f Any computer that has this package installed or running should be considered...

MAL-2025-5062 Malicious code in truth-loop-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d367bf360c2776bacedd56615fcd53b1d0c2bdde9bc37e0e3407459bd7392e77 Any computer that has this package installed or running should be considered...

Malicious code in hello-gator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99c626fd5c61521e9e6c52377eb5d3a75ea4230c12ca16c294e86ead8364c064 Any computer that has this package installed or running should be considered...

MAL-2025-4896 Malicious code in tim-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50e297c0a9f986b2fbafcdfd60d41c5da7141d50b7145f69606f92ca4423f00f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in processwithcloudevents-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8c9351acabc986c61d13f3792948c4426e4f75423a912f6a4cd08f046bdf07e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4834 Malicious code in http-proxy-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7998e5d5542dec49e826d015f403fed34b411fdd9e28030aea1c3aa0fc4657ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bs58-decode-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 365e9781bfa38295c42e9eb63d2506e4d79922f9040b5ca8f39544eaab056c91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4899 Malicious code in uiframebox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab2c616a224cb417f60cd79d4602b85a358e0d787a50cf44ad48b4be6d7a59f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e7caa25c734e04724db6b49ecc13404bf34c539b99cef0c60d7bd3125f17b4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4811 Malicious code in @mediawave/lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5728f228ecbe0dfd5db6afd530842107e9356201123b885d36418429c37ffbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4885 Malicious code in solders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e7caa25c734e04724db6b49ecc13404bf34c539b99cef0c60d7bd3125f17b4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in server-bare-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39c5415871a73082265e769aa9eb273c1fa34089a841af9700ebb890c064d102 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4883 Malicious code in server-tiny-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8340f02ed93f95eece2017d2788917631ff5e62a3c2b04408288113576747a77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4881 Malicious code in server-bare-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39c5415871a73082265e769aa9eb273c1fa34089a841af9700ebb890c064d102 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylelint-fix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbe442bbd2c1150c0a47f6b07e96536f93337a9f509f9ee7891a040a0a7c26f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4891 Malicious code in stylelint-fix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbe442bbd2c1150c0a47f6b07e96536f93337a9f509f9ee7891a040a0a7c26f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4774 Malicious code in cwttools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca62534e7711771b6dd288ab65012fd737ec6e0fc380035eb827dddef397ee86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in springboot-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a8c54ec931e96de6b2788e07cecb1d64ae325d3df32749035073a24f1a762c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...