MAL-2025-5786 Malicious code in k6-studio-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 066503bf35690fb58f38fa44cc7e64d0eaf5a0e5f352167029b6a5ed00a448b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5767 Malicious code in clock-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94f232d3ca0a55cee4a30418e75111d62c8ce4b44baa018c72400b9aee310ab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nomicsfoundation/web3-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8be3c236328576fc8bb353a6101fbbf35e483b67f019623f8d2f7538898b568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nomicsfoundation/sdk-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd1a561b2ed5703af862c67f4c412afa3ba942efe78ee0b7fc55066fc7c8c316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in win-utils-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99d55e34bfdccef418c3d9a32fed525e724c57d61a1128d9924506b8b25200e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5753 Malicious code in win-utils-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99d55e34bfdccef418c3d9a32fed525e724c57d61a1128d9924506b8b25200e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jwoiesk11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8272ab239b8e1ffc477bd4ffb90538ddeb7d1cd11f6bba6b8ee8a396aeafdb61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5751 Malicious code in jwoiesk11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8272ab239b8e1ffc477bd4ffb90538ddeb7d1cd11f6bba6b8ee8a396aeafdb61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in homiersla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18b688a5a2d22b21d1e643d311c8364a0d6d26d28c537c6e4fbf1a00f7dc12ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dashboard-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d421eea33f3a5072db15cff1f0c190af64dc4e7d8963bb2eb8a32d6ac855945d Any computer that has this package installed or running should be considered...

Malicious code in oneapi-environment-configurator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b59cc2d584cc83aeb72d1b1e463e2f4423a81b86d2fa4b7a2bdcf7867bba348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-json-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0df63e5033b70f866f957f8443b533f09684b459897700f9ed44542d23b8fe82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-iot-sitewise-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97ddf55083335c582abfc892f9b5d93c8b5ee5232f0fa07ae4da45dd8eadc84b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5713 Malicious code in oneapi-environment-configurator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b59cc2d584cc83aeb72d1b1e463e2f4423a81b86d2fa4b7a2bdcf7867bba348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bankersbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b58330b4e53f3d1ec772627abe8ab65d077ab40fa89bd51741ebf8ec708f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5712 Malicious code in oneapi-analysis-configurator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62a408f2d5e2b67773b97c7a264f55597c4afd65c8bd0858394b6fbff152ec17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dry-rb.org (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cb554feb840a59c833bbd10911c129dbe4c18f03c9c6f70097517c20349f3b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oneapi-analysis-configurator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62a408f2d5e2b67773b97c7a264f55597c4afd65c8bd0858394b6fbff152ec17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5693 Malicious code in frontend-release-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c7b669533af76df1c26a09f15c4e4251d5ebc14cfaceae8a7af9dacbe4f8741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5670 Malicious code in bankersbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b58330b4e53f3d1ec772627abe8ab65d077ab40fa89bd51741ebf8ec708f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...