MAL-2025-4887 Malicious code in spring-security-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1c1536bc422839f96c59d0abf7e874f94ede428b9047a56668eb0293b047631 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scrapy-user-agents (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ff2592eed2257896f8765049b3073fd6bb14f2696691bb3ed2f8925b0ea1e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4879 Malicious code in scikeras (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a571a503cad6f3d53b07cecdc303ec31a63e8375eaf27100ef3699961d08138 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sails-mongo-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99dac97342765bfd9039172f29af80e20ed854d90c64b5f495703527188c6df9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4878 Malicious code in sails-mongo-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99dac97342765bfd9039172f29af80e20ed854d90c64b5f495703527188c6df9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4875 Malicious code in rlang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd289b9631ea3f924b676ed269036ef6847da93210a3a684e5ef151915e5913c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rlang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd289b9631ea3f924b676ed269036ef6847da93210a3a684e5ef151915e5913c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4874 Malicious code in react-query-persist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 510db02a90f329eb7d168ccd3c9ae2f89d81e24f4dae93823b0b1fdac4bf2256 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-native-atob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b91f4867862f09ae93e8c5413e74fc6e717d421419c933ef721bf15df14c6e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4869 Malicious code in pyserial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bad99aa8d1920abaf90491f3c8160c6903da1e7bdb086b854dd0e1e2ae434367 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4868 Malicious code in pyiceberg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5fa44fe907854125c2e5e5ebed5ecc53ad3578ce319bfdf5a92524c65793185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pydantic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb9e1c20553202c4b4edf9fe0ab41cf161494ea68d49f7c930d8a5059b6543b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in playwright-coverage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf8711293d366c2ab04b98c26ea6e6fbc5022a045727404387dc51c9496cb328 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4863 Malicious code in pipreqs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94775693df8241bc82973cceb421a0a3263d044d7a810c724173c0b4ada361bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opt-einsum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5af28147ec311b3f20c1a63a200d242102077c353766cd3b77c9809bd0af917e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openssl-pkcs11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79dc9baa4004010efe414f668e04f952497b63704184784cffcac6e22d8ce16e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ohhttpstubs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 642efaac1637742aa2d3755af417f202219293d844b0c0ec46300fa7fdfaf046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4858 Malicious code in office-addin-debugger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4af71d95c178cd7b60b7f8f5f758ebd7003e5b853b2649a1ad465580d6751f6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4872 Malicious code in react-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea18e81b4f8dd9695b27d71a047d0e8f2e6c2bb52dcd1b3b3f19cde0391c2fa5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in networkx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ca30d930400b8c13a77995d9249cc90207ed207eef9973b5ee86f4c79866ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...