MAL-2025-3965 Malicious code in gltfvariantmeld (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0155401f6326638ba77892ee9e8132c5d7094e7f8bb20e46f22b995c255ce0a Any computer that has this package installed or running should be considered...

MAL-2025-3962 Malicious code in dep-b (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bf502f4603015140b50f4fa201c46f256eefa3553e9a6f91ae9304bb42966d6 Any computer that has this package installed or running should be considered...

Malicious code in mockman-js-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edfeba68a0ab8249537859bf5e710af081fc2dbff163cdbd8af1b663966c82d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3780 Malicious code in mockman-js-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edfeba68a0ab8249537859bf5e710af081fc2dbff163cdbd8af1b663966c82d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3781 Malicious code in sw-cur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b6e97eb66e9295d27e2c439734b0d7a8a4479ea22612dd7c5623827fcbb53eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sw-cur1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a28bc06bd5eab5a2d0c4613164a21a634b106c634b5a7610d1e5a0410119553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3747 Malicious code in @myop/angular-remote (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c529845135f67681059adf0cf2c0ef30da66673da293016d5c193e8162f8070 Withdrawn Advisory This advisory has been withdrawn because @myop/angular-remote is not malware. This link is maintained to preserve external references...

MAL-2025-3751 Malicious code in @myop/react-remote (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 029683b35472b242040bc8c08dd99e2a8f26b63ed291bff700f7a06ef0eb989b Withdrawn Advisory This advisory has been withdrawn because @myop/react-remote is not malware. This link is maintained to preserve external references...

Malicious code in @myop/n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 255efefdd8925b80898665b63b7eec3abb22d0cd2e7a2d6288ead027ebba6ec9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3750 Malicious code in @myop/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6207bb7fe82e114e5a3cca22ee07a6eb58b410e8e18bf5fd0945840c03761f1a Withdrawn Advisory This advisory has been withdrawn because @myop/react is not malware. This link is maintained to preserve external references. Original...

MAL-2025-3752 Malicious code in @myop/sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb5f8501100b711c468850e2985fc83d8369da105d072a9ce2543a0f189b7326 Withdrawn Advisory This advisory has been withdrawn because the @myop/sdk npm package is not malware. This link is maintained to preserve external...

Malicious code in util-buffers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26051aff776c128248d32f414e8919c5c3482b654403e6cd39478705581ae697 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3773 Malicious code in util-buffers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26051aff776c128248d32f414e8919c5c3482b654403e6cd39478705581ae697 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3760 Malicious code in dependencyconfusion6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fde19a45f6be5b0f2c1ffc00fb381166f7ec0cbb3d1df2ba0d3e169faedcd72a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in just-a-cute-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 762fbe2f0398f3fba03f9f919ed353d349802e39e0942990e4434ec4ddc9c1a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3756 Malicious code in astro-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eb39edf57f35aebc402844f0886c494159650bcfbb6faf113aad3c6a62707e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3770 Malicious code in nimiq-supply-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 488013c68b42615c46c340c4a4ae6645cfb0bfa492440ab3d0a89018da156379 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3772 Malicious code in snake_case_name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 523a9ab72af7fe10c7976ffee184cb3448e165fddab79bc2cd117f3b88d7b4c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in abuse-ui-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52f0ac6f86a904aee580160f8eb62130b70b4e6326a6e843cdc9977622b50add Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3755 Malicious code in abuse-ui-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52f0ac6f86a904aee580160f8eb62130b70b4e6326a6e843cdc9977622b50add Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...