MAL-2025-5726 Malicious code in santa-barbara-weather-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8063dba7f69a647e89871018d17e8c49075e5fc748a2c5c009aae9a2d5d25e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in my-js-cdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ded23b9cb07e2872a7f6c888c1561c2341dbefc0efe38eed634d46229785725 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kkyun-display-flag (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbf5dcd7042eb6d07404348b3566e81d0430bccbe3590ddf39941414f69e4216 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5667 Malicious code in appf-react-router-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bee107551e93c84b7b5e64794220ddf4898466e42cd01d1bdde8b41bb0cabd83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5719 Malicious code in product_card_grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cff91597e126b61f1bb6911119a35d329959dadbfee0c086ccd4c7d79bf2ca7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5740 Malicious code in your-test-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a1133758e2658958e3fbaaaee2db0c856e5ba745f18589b79e6c04859207dd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fe-comp-input-text-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcb443ddf0b8c18bdcbd7dcfbf6b8e3c2a5ba2614ea22acf4310735a82259d51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5691 Malicious code in foundation.util.triggers.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83bf60b2f5ebff2152502dd84c2d1275fe67e6eb08d9ce2937e0bc3de9f113a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in foundation.util.triggers.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83bf60b2f5ebff2152502dd84c2d1275fe67e6eb08d9ce2937e0bc3de9f113a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @jmerhi-atl/evil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91620aae25b612bc0174c38ae40a4b87860a8070824a4fbb447968986ad8c368 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5663 Malicious code in @jmerhi-atl/evil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91620aae25b612bc0174c38ae40a4b87860a8070824a4fbb447968986ad8c368 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solsafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c0e330c03bcbf5c40a3477fd4fa0029e71ee952bcbdc57bbaf89d39cbec85ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5724 Malicious code in react-smoothy-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4605263fb8378867aadba09b4a6f0265ce7325871f0c56d09e75f464cb397e39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in boost-chii-90s (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce6390292c9c894f446340d69e7ab97d7fc565aa97aec4a06eac08dbd93e56cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5676 Malicious code in chii-aungpao-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7612d6bbbfb9dc1ad7c5edf5f536d13eaa4e20da2e1a895caeacfb8b0e75140 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5672 Malicious code in boost-chii-90s (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce6390292c9c894f446340d69e7ab97d7fc565aa97aec4a06eac08dbd93e56cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @instant-postgres/neon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5998172caafd763bd9d8fc92acc7e18e96f4a14c19f5871e16257eaff6547366 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5662 Malicious code in @instant-postgres/neon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5998172caafd763bd9d8fc92acc7e18e96f4a14c19f5871e16257eaff6547366 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5660 Malicious code in @bosch-iot-console/rollouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a7c59a1a8e53130cfd7701d08a305d5e478e43a2a5b39f57258f504069f050 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonskipy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 825aeade17635320d2922155fc8e36ab7810c8cd83aa62a8521613534dc52e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...