MAL-2025-4855 Malicious code in networkx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ca30d930400b8c13a77995d9249cc90207ed207eef9973b5ee86f4c79866ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4854 Malicious code in ncftp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bc7a5d34f3860004cbdbf4f622418fa2383dd3ba5ebff2ed2074a4a13d1b85d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meteor-react-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10edb5e94e2b6aede51af9b2525726341571187cb32e9a56e9b86639c7130341 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4850 Malicious code in media-recorder-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a0ea0109d577f9df113fa325e2972e99d701b2a51a9453305c09381bd93d902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4848 Malicious code in listenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4140488867aa92de02b72ad33c7ef4a3ed4329fa8de9b7bfe1a4e64d0bd81d70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in listenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4140488867aa92de02b72ad33c7ef4a3ed4329fa8de9b7bfe1a4e64d0bd81d70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in libp11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3af33b7a528459e84cc55723ecd56b61a2273b9ca8d6d54e18dd9083c9b62360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4843 Malicious code in libffi-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 570b28ff882e484be3a59b834348694d7d3f5ec0f6e5aa712640fb0336ec6a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in knn-kdtreejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3117136c7dbf6c71fe3eced4aafbd5ea18b96272cc7f5aa5d58eccab6c8d17f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4841 Malicious code in keypress-win (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f954e50f0d90246c5d2855aca594a6179bc90df76259b2b657e357f06af6cb2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in karma-spec-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3503f8ac76bf4e0ba36fc7cbaab721a6285fe53ff821cd82ca0f4e417308eb49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4838 Malicious code in javascript-heap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83e06344668ac9569d6453b98d15e492e35ad313b880f085c08f7600b977a837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in javascript-heap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83e06344668ac9569d6453b98d15e492e35ad313b880f085c08f7600b977a837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iceberg-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80881b9c9051ea4744eeccd8038c44bb7bf6fd18b1535d8319cdf556cca76282 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4832 Malicious code in gunicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269ac7e0cc85fe2e3078f51d0b39078670681500d705eb403172aead25d9ca18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gunicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269ac7e0cc85fe2e3078f51d0b39078670681500d705eb403172aead25d9ca18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-auth-httplib2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e57c6a4e7ad5efe49fa44cffce46a4872792f3f1225d726be0b6a6c3d5ed156 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in espresso-idling-resource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 783a8905e5ae890747d02955448c18b9e8ea3bb082a9c12d5eea209a54c33297 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4828 Malicious code in espresso-idling-resource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 783a8905e5ae890747d02955448c18b9e8ea3bb082a9c12d5eea209a54c33297 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4827 Malicious code in eslint-parser-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e78236f48c6c57e51a72f8df6807df4f6d5c0a5b386814bfc0ca2d0b81bd82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...