Malicious code in showroom-navigation (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 109dd8de3c4204701f6e5b873a655af5697b8184549503764bd6de8d330506f1 Any computer that has this package installed or running should be considered...

MAL-2025-47087 Malicious code in showroom-navigation (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 109dd8de3c4204701f6e5b873a655af5697b8184549503764bd6de8d330506f1 Any computer that has this package installed or running should be considered...

MAL-2025-47054 Malicious code in car-configuration (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdbf9748a3a58d22a8e743b19e6a1b1d190d946e25490ccd6e313c16426b3782 Any computer that has this package installed or running should be considered...

MAL-2025-47086 Malicious code in service-config-endpoint-provider (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0879016c96750d8d2a0320e43955954e5f07cd7685cd65103101b1b9d3c3d7e5 Any computer that has this package installed or running should be considered...

Malicious code in service-config-endpoint-provider (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0879016c96750d8d2a0320e43955954e5f07cd7685cd65103101b1b9d3c3d7e5 Any computer that has this package installed or running should be considered...

Malicious code in falcon-login (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b99ae21b50a32d57d9c469d91755ecfa18484d7b95f0b61ccbefdf9dbcc1764e Any computer that has this package installed or running should be considered...

Malicious code in hrpqvq (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55f4d5b1b37e9dba04434f78d420f3de4da2ed55cdd40b35885127903afc5491 Any computer that has this package installed or running should be considered...

MAL-2025-47066 Malicious code in hrpqvq (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55f4d5b1b37e9dba04434f78d420f3de4da2ed55cdd40b35885127903afc5491 Any computer that has this package installed or running should be considered...

MAL-2025-47065 Malicious code in hrpq1wq123 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1723d1a69b33a9e203de3ca455da66ce2a37a8e1b6a65edc18c77634d2c22ae2 Any computer that has this package installed or running should be considered...

MAL-2025-47062 Malicious code in hr1pq1wq123 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2a09dafabe0a4b58bcb6128f232552b08961a683b79cd4f2aa41be77c0c2300 Any computer that has this package installed or running should be considered...

Malicious code in hr1pq1wq123 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2a09dafabe0a4b58bcb6128f232552b08961a683b79cd4f2aa41be77c0c2300 Any computer that has this package installed or running should be considered...

Malicious code in hrpqwq123 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cebbda0574f9d3ae88ca29a1cb1e361c27a4fed067d19a24250e692a54bb8d8 Any computer that has this package installed or running should be considered...

MAL-2025-47068 Malicious code in hrpqwq (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f61b8d566833d9a79f81fa26da24abd2408ff773f6e72c3fcb76b67cbf3b3d8e Any computer that has this package installed or running should be considered...

Malicious code in hrpdesign (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e370e366167f90ff8c5a3a171abe2bb14e301cdd2d5499e98f66bd1e653fcf88 Any computer that has this package installed or running should be considered...

MAL-2025-47063 Malicious code in hrpdesign (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e370e366167f90ff8c5a3a171abe2bb14e301cdd2d5499e98f66bd1e653fcf88 Any computer that has this package installed or running should be considered...

MAL-2025-46993 Malicious code in @duckdb/node-bindings (npm)

The DuckDB Node.js package @duckdb/node-bindings version 1.3.3 was compromised with malware through a sophisticated phishing attack targeting the DuckDB maintainers. An attacker created a pixel-perfect copy of the npmjs.com website at npmjs.help domain and tricked a maintainer into logging in and...

20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack

Multiple npm packages have been compromised as part of a software supply chain attack after a maintainer's account was compromised in a phishing attack. The attack targeted Josh Junon aka Qix, who received an email message that mimicked npm "[email protected]", urging them to update their update...

Malicious code in proto-tinker-wc (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7c28102f10f0e7abdda4eaae50e9db8edf27c3b15fe2ba6841ceb95fa907adc Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-46970 Malicious code in chalk-template (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d822fb27286b8e6907df0e40f16e8722d81c16e24c35455be3d6d248d25b55ad Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in chalk-template (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d822fb27286b8e6907df0e40f16e8722d81c16e24c35455be3d6d248d25b55ad Any computer that has this package installed or running should be considered fully compromised. All...