MAL-2025-3260 Malicious code in kernelcon-bad-packagexp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b23dcd407de61faa602b2eaaa097be5383c16cc1c62b28c707bd050dd46a1720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3234 Malicious code in dc-comments-beta-dropin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9b940d69d756e252cedb90472d991e301153623e4118e99320cf87b299b68d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3258 Malicious code in ink-web-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7d7d7be1f1ae1e0b29b9c5187d8041c62c44f247b62c7a071b67a0e821fbac8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3249 Malicious code in featureapp-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00e9ff6ce07bb821d31987961d61536cdf469ba2c6f3f7a1861f96c402a900de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dc-genai-dropin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4921314e7e97ba500355f996a14c9619cadf54912d2dfdbe5eb22750a5e5c1c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zkasm/zkevm-rom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d383d50e39e2bae07fe90f53cbe2c8917b3fc778425f0dd973b8d50fc6592698 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3267 Malicious code in zkevm-rom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebca28836b13291a84823420d145b2150d556abbd4d19fbf2dfeacf67a7553ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3225 Malicious code in @harvest-finance/harvest-strategy-arbitrum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062f2e97a3824c2a6e95152cfe109cfeaa5426a6153438aad07eabee03820ba3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ton-evm-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e3402e5b7c8513fbd68507b2a18f6538cdd485f16cace59be82da512cf1a99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eigenlayer-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dcbc6398c70af4eea7bcb6879aced4ed322d24aa860eff099e1054163764f2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3264 Malicious code in ton-evm-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e3402e5b7c8513fbd68507b2a18f6538cdd485f16cace59be82da512cf1a99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zkevm-commonjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f97b3c164e028fa05d0832ddbf8afc66fa090caec4d50eac611b2132c8b24925 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3262 Malicious code in talsec-react-native-security-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68ab8661116d9ec30b2582ba0a9547684e8ad10024bae79f2b4094e5ea0937d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3259 Malicious code in juvare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d66c69dea5e4d686a284a2d0f9e5260a58a90498ab4ff924f3928fe356f741a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in responsive-pitch-fx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d668a688ecd5c7cb1ff11b793e7a8664fff947988627a1e0ff5be58aedc02bd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3226 Malicious code in @mlbtv-clients/isu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 130a1ca20af439a3a3aac26f4a56391a47dfbfa51c48fa2883b404d415c64b38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ezidox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77793c97cf9e01c68e50b8c80e44f0591a67a78cbcd13b931f43cb56dc7fe0b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @csds-web-components/csds-iconset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0df80e45d05fa1bf3f5dd10759c4e1ead5894e41c8f13957e21d0fe6e8b30d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cat-wc/utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac8c9db89562180d78f3b248882e95e33c0c24a2bc4ffdfd76b1029506f1393d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3216 Malicious code in @csds-web-components/csds-iconset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0df80e45d05fa1bf3f5dd10759c4e1ead5894e41c8f13957e21d0fe6e8b30d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...