MAL-2025-3205 Malicious code in wormhole-messenger-solana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3533c227d2e503f88e2ae202b9433a6a7a89000b952c2875242b1834dbd32089 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3200 Malicious code in solana-candles-oracle-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c9505d4ee620ab7696e0bb4f2680eaea2d24795900244ef09291a911f0e7562 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitcore-message-zen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a0777f44eab903be6813ba2ee9c115eb559b4cad5e561e95dc8ead1f488aeee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3185 Malicious code in esy-m4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d50f3c1994b8efe53e778d8ba331e1ceec48993b57b0fc3f279eb3f4b9dea361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zqdl333zqdl222 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45afbeed2767a8e647942d3bf0d4deb3cfe4590a9aa658563e5a40ee76574dae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3206 Malicious code in zqdl333zqdl222 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45afbeed2767a8e647942d3bf0d4deb3cfe4590a9aa658563e5a40ee76574dae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UAC-0226 Deploys GIFTEDCROOK Stealer via Malicious Excel Files Targeting Ukraine

The Computer Emergency Response Team of Ukraine CERT-UA has revealed a new set of cyber attacks targeting Ukrainian institutions with information-stealing malware. The activity is aimed at military formations, law enforcement agencies, and local self-government bodies, particularly those located...

Malicious code in nucleus-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef4a82fababc58d4330f2cc60c17200d50ca1501934c59e081fd469d18282173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sasha-bsc-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6367569e4a02b7a1a9d97e0d7cc953768bdfbc31f96e2cc9deb7a5610eb149c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3157 Malicious code in moment-encryption (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff1ffe845cd41861606d3dc20d843dbe68a99b2db1e87c2e012b8a804a78c494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jito-encryption (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b021845dd618989c11d0735ce9f7a8657d0bf81baea82ce70c5d300191bc9ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3154 Malicious code in jito-encryption (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b021845dd618989c11d0735ce9f7a8657d0bf81baea82ce70c5d300191bc9ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in byted-midas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6dc2f04495ba96914b9d781f935e6e0b4e6e610e7b15cf3b603079b0895b9df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3147 Malicious code in byted-midas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6dc2f04495ba96914b9d781f935e6e0b4e6e610e7b15cf3b603079b0895b9df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3145 Malicious code in boss-traceid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 989a91e00c66bddcabf2d2aa4d190e543394315ecef80cbe38c70a3f85a00cc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3146 Malicious code in boss-ui-ats (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4aa5d2f568d0db7a56731ab67f01754428ac6deeb365683b5fd0ab8a598c26f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in boss-traceid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 989a91e00c66bddcabf2d2aa4d190e543394315ecef80cbe38c70a3f85a00cc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in boss-ui-ats (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4aa5d2f568d0db7a56731ab67f01754428ac6deeb365683b5fd0ab8a598c26f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zhilian-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ec576642e5bf8ec161e2f79362ec779bf0fc68660c3bd28136bf39f317b9341 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3168 Malicious code in zhilian-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ec576642e5bf8ec161e2f79362ec779bf0fc68660c3bd28136bf39f317b9341 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...