Malicious code in proc-log-cmd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef3082ede726543b5e19f768b9c6630da020446b5902205ab679184c0cac0c03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postcss-minify-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4db9996e94931777af1f4e5316899b20ba2b9b353de4c699abb1da818b99dbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6366 Malicious code in node-loggerx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25f40908b2a7b04409b374e0ebaa8c64795147e55c355bdc0c3d3d783d5180e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-loggerx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25f40908b2a7b04409b374e0ebaa8c64795147e55c355bdc0c3d3d783d5180e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in next-preconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d6c913ab58ceadfc5aa3fc495351d79f6b78e5af57e7256ed73de89043e91e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6363 Malicious code in json-confs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeb598462f7d5aa755a41083007142a93c31fc7a61b70ea43c88dcefdd53025f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in json-confs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeb598462f7d5aa755a41083007142a93c31fc7a61b70ea43c88dcefdd53025f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-reactjs-refresh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4abf589cdec43e8ba609988d38155d5965b59ac6a83b1d251405fdf13629cdce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flowhint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d02865586d06eac74ab9d563763e3996029df4b82ee5f4cfdd9dcb9ff134379 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in exceljs-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 542e79c60c18aa779332620c884952b318f885c798a0ac8c2d3bf87bfad26950 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cookie-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c94db01436156d78a21b41d74cf372b4e12f89a2480b8986397309b1c4165b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6347 Malicious code in yaetia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d95f6b127a40fcc4c4557dc3e26a11a6136d8837c28b9a32663f3a7a14a1c13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6338 Malicious code in @sys711/my-npx-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4c05684044741c67899c2f0bd5728540fec66f7e4f62a44542006c938e0c550 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6342 Malicious code in request-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 240e3c0e344b97358f5f4788bec6e5e1e1466f45e62d14e98953182412e0827f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in query-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed848ba7a41198ae72f2a0c36d31e627fe5ca7503bae293fe204e3a3dff65620 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6341 Malicious code in react-stylizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 812122411d8ab81ce837c1af7272056e2f1dd88b413f290021a615d5ad03524e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6346 Malicious code in vite-postcss-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31b1ae9dbf2d4d4b83a07e7c8d7d340507e18144308970a7cd81c1c6e5dc125f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fast-todo-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e463847c2b9e6ff287b0862f66d4845c4452d8f4508ee7a298c99fccec9ca00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6330 Malicious code in @ai0x1337/budoux-extension (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d38d31eabaa7910f5de7238778b4b935f2369b2ffed9315c03e0a03d6171959 Any computer that has this package installed or running should be considered...

MAL-2025-6334 Malicious code in style-postprocessor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25f023d8b7876e055cebe61a886a5fea11ea9b7c8eaeda3468cc1b18e27dfbe1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...