MAL-2025-4681 Malicious code in daenax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3178f178bdbdd66d641b33909e4d04c304ec1b92b0bf5196a23abe7683d3d30f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4686 Malicious code in graphstruct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d501610322eef6c7aa27534198e500566f7ac611d91e55d92612e12fb8bd817 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4695 Malicious code in system-health-sync-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13c337e149bd36fcd54891e550bf7fdb7c1dc36b1bfc1b06e0b1427851d4adde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in portfolio-config-manager-mongo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7313dd72cd35e9b2cc754bd7b41842071deb31b3be1bef658e61241e6bca17e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in system-health-sync-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13c337e149bd36fcd54891e550bf7fdb7c1dc36b1bfc1b06e0b1427851d4adde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4692 Malicious code in portfolio-config-manager-mongo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7313dd72cd35e9b2cc754bd7b41842071deb31b3be1bef658e61241e6bca17e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4642 Malicious code in figwrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cd13bb1130e41b3a2f595500f734384befef8c3107668edb6c2595730a13ddf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4652 Malicious code in phlib-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a4915ab271cda053c8653639ad5f83905fae202cf8b9fbe4123e86db9b87911 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4647 Malicious code in node-pkg-state (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0891ea1584d40cb7d6b9667931aaeee24089a5d7f605727e42f717b4b378682 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4646 Malicious code in modsys-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ec4d746dad0e8ec6c9a218ee82eee9df40c214420c3bae1974826bee6772a63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in canvas-helper-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10a55b1c2c0c95b2f39df71c4e6d9dc7b34f680ad6ed6c14449d6bfdb3dfb207 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in procentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5ac317d8398fc0737c7dd1e8d17c7a213e621acac767d7b3365195659ae4364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodyne (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba16ef861090c23b958fabcd5d99446ac8605df4f4eacdb52bb885d11c03f480 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4655 Malicious code in procentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5ac317d8398fc0737c7dd1e8d17c7a213e621acac767d7b3365195659ae4364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4742 Malicious code in esm-imports (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc52bdabe3327881632cbbe5a3f608dd1043fa904709057610afadbbf9e40637 Any computer that has this package installed or running should be considered...

GO-2025-3732 GitHub CLI and extensions can execute arbitrary commands on compromised GitHub Enterprise Server in github.com/cli/go-gh

GitHub CLI and extensions can execute arbitrary commands on compromised GitHub Enterprise Server in github.com/cli/go-gh...

Malicious code in minimal-ts-webpack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1cf4c25b4f12d9dcd4bc5b39db0936c0be665009239c28b85696d1a55fafa36 Any computer that has this package installed or running should be considered...

MAL-2025-4639 Malicious code in basic-with-react-hooks (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7efadad57bdbe52801b9d31e36cd5cd4678d838d46d71c95ab940aee65a12bc Any computer that has this package installed or running should be considered...

MAL-2025-4729 Malicious code in adobe-parcel-transformer-test-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b58e301f0f85b9d9bf91ef63a56544bc62c9002bb5ff0e59733da758b1115c73 Any computer that has this package installed or running should be considered...

MAL-2025-4728 Malicious code in actions-languageservice (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acb74af5f6a7d398be58bda53f50ba2f8e6487b53678077cffda3a4531ecef4 Any computer that has this package installed or running should be considered...