Malicious code in actions-languageservice (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acb74af5f6a7d398be58bda53f50ba2f8e6487b53678077cffda3a4531ecef4 Any computer that has this package installed or running should be considered...

Malicious code in stake-operations-script (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ea2fd7f2b3976c6f3bab727d8bd2366c4ed8ddfbdaba9e669c7b01d1a3532e1 Any computer that has this package installed or running should be considered...

MAL-2025-4643 Malicious code in frontegg-angular-sanity-check (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85f18cbdaf7836cc4a267525da5ee029eb20efcf6f1ef0e2208a62448a14ef8f Any computer that has this package installed or running should be considered...

Malicious code in frontegg-angular-sanity-check (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85f18cbdaf7836cc4a267525da5ee029eb20efcf6f1ef0e2208a62448a14ef8f Any computer that has this package installed or running should be considered...

MAL-2025-4656 Malicious code in remote-actions (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 602ccb0c9280efaed9bc494cf89db45c8fd4d77619a8b621c339d44dc6479bf5 Any computer that has this package installed or running should be considered...

perl-CPAN: Bypass of verification of signatures in CHECKSUMS files

A flaw was found in the way the perl-CPAN performed verification of package signatures stored in CHECKSUMS files. A malicious or compromised CPAN server used by a user, or a man-in-the-middle attacker, could use this flaw to bypass signature verification...

Malicious code in omise-woocommerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 978dcc95cfdc2a3984742e165589b781c4f082929c56916182c817d9e30f08ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ua-aio-h5-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab58d896f2b725bec2019a299fcded18aa3b8608029b55314c6b34b5c3d4d195 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4638 Malicious code in atlas-global-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2da4219e6bc0eb3a57f45a9fef584e5c6b27af790d62395489febfeb78c5bf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4659 Malicious code in ua-aio-h5-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab58d896f2b725bec2019a299fcded18aa3b8608029b55314c6b34b5c3d4d195 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4650 Malicious code in omise-woocommerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 978dcc95cfdc2a3984742e165589b781c4f082929c56916182c817d9e30f08ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in https-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef1ec069afa771aee14fdc9cedd50a8db0d66030e38f15897a5816782e20a892 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4644 Malicious code in https-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef1ec069afa771aee14fdc9cedd50a8db0d66030e38f15897a5816782e20a892 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blipkitgit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e899e9940707fc06d8dce8080f1ea4e59dbdfbb122526755ce4006c4e226d92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4741 Malicious code in educational-depconf-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edb795d28942ec8fe6ea239625dc72e6a73b5965b8631c09f3544c800e54880 Any computer that has this package installed or running should be considered...

MAL-2025-4645 Malicious code in lib-wallet-pay-btc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1867a5dee260868eb8f3e51c3df89b8f1e5752dd2c8529cbdc4ac73ab18d7394 Any computer that has this package installed or running should be considered...

MAL-2025-4658 Malicious code in terraform-provider-leaseweb (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4805b99d4eef235ac9d4e28a0c763325dac930bac26423b95e7c74a2f7286df Any computer that has this package installed or running should be considered...

Malicious code in terraform-provider-leaseweb (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4805b99d4eef235ac9d4e28a0c763325dac930bac26423b95e7c74a2f7286df Any computer that has this package installed or running should be considered...

Malicious code in parabol-action (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d82468091c3a867fd7981eef0555f14edc29822f932782c0fac1bf9e67a15d7e Any computer that has this package installed or running should be considered...

Malicious code in vite-logging-patchers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad6175bd8f5029571f264ac2f7c183d7d37e0d212c2389e025a9607ff8046f31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...