MAL-2025-5949 Malicious code in proc-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3789e8e4aa2cd220d264340ceccd11c9e9e8b6d5e35c4ad402303a54500a105c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5914 Malicious code in flowframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26594c7af803e5fdd685615007a51b104640aedcb8c6658ba144125358c38fdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flowframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26594c7af803e5fdd685615007a51b104640aedcb8c6658ba144125358c38fdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5909 Malicious code in ecom-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 521b798d9b0e0109ef6b2642feb49a1c930d97adfa05279b55646931ce1e6352 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-usageit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b967c2b3def62623ccbff0e7e878a7e995fe0dd101b98430c3d1f875cd4729c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5948 Malicious code in pretty-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d026c38e3bb7cb5b1d371ac307d4728cbb8ded9508cb84340eed05baf1666948 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5967 Malicious code in vite-postcss-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a86cf25e81b6e1f513cf67782d9ef778fe14ad1eba93f4a28adb2c1f63bfa965 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in querypilot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c3898e80b9dd4a417ddf444390b2d4adef6f4ac18a5f2e63f2d25defde9db27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5951 Malicious code in querypilot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c3898e80b9dd4a417ddf444390b2d4adef6f4ac18a5f2e63f2d25defde9db27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in okta-template-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa63c053c0856df8269f5f2fed7960e203427d897b1fccc26acdfbaf8108cbc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5921 Malicious code in healthbottestservice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ca7387a0c1ef2ec15fea2dad8418095f55af6c8584c7a7e25ae06f267546e51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flpmonitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74c2188031c31224b44ff20777ab414101ae7800ccf522e30f566a0bb53f37e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5953 Malicious code in scenes-ml-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c945347ba764d47a25e4a06c08fc0562576992fecb23b25905113a20289f0be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5910 Malicious code in ent-esign-newweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07c7bcd6c3ad603762deb743d81c44dda73a6abd324f8916a36a46f065c1cb8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ent-esign-newweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07c7bcd6c3ad603762deb743d81c44dda73a6abd324f8916a36a46f065c1cb8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bk-card-cc-credit-limit-adjustment-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 839ee8572e063e7008de9939f5e66afdb87eb4083735168ee48b739ed54814d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5972 Malicious code in wb3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e87f4d934640afbd1d8d2deecd75fb681e94cee807f301d6643bf09e55c699e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wb3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e87f4d934640afbd1d8d2deecd75fb681e94cee807f301d6643bf09e55c699e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in axio.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bfe2ad5a0a19b2113a984106f8802f798b7545a802731bd8478cc635df4defd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5979 Malicious code in wrb3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d88ef4850c22d9aecb5ddb11ae54339766a852526d80394aea04b92d91aaf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...