Malicious code in piclite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d776815ebc9f644d4e180897c8faecdb8179b86900d868934148989047d6ef55 The package piclite was found to contain malicious code. Source: ghsa-malware 298d5c66cb85081f480bec9e5c38bc7c2d419d609714be7346d3bafb0b2525eb Any...

MAL-2025-47959 Malicious code in oxrvxxxxxaslllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbb43c3aa5e1fe9b33fc7a3c3a439ef7edd69817df8984551602b834f7b64584 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @navancorp/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00d23863df2bb18ff4d7478d9d974206ad5e1959e64da8883e6623a5747b4ad3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-examples-langchain (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8aabcced92aa935f39ef4e66942764d799e0d1ca4e87baffe59fd8fad22ac10 Any computer that has this package installed or running should be considered...

Malicious code in @emersonecologics/emerson-angular-trove (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c229693a6cfa1c30c9c957144ab93c804e134a54c587ad75b4e2eb860d89b778 Any computer that has this package installed or running should be considered...

Malicious code in category_textured_background (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b79fb63e44acb7b89709ad74956de390dafd2a044dfe4ca90e3759773517a9a Any computer that has this package installed or running should be considered...

Malicious code in base_sdk_const (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba549d28b0740cfb0d22c85b7b26e5ccacab6cf6220e202dcd28c19a1abfb81e Any computer that has this package installed or running should be considered...

Malicious code in zoomapps-texteditor-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b6be9c754c32184fac89d2d416b8d75cc15d7bb20219f8ace3c698d6e415fff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/aliquam-commodi-ducimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a90b39a2fd541fd9b1ff95299b0cab8d887493f1aa1cb5b237d0e571f56e1fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontend-style-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2950942ff85300d3cee0a0eed9f373eaaa043ef93e942089421c5a5586e209e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in emonn-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 077262f600237c05a5783890d1b32eed35f9068d01b75efa3e8f612e603af7b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in number_of_input_data_dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceafccfb70c0ec9fad4c4a8cb8bf240c997458411f9e824f9f7e88ff4918136f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pruebalol1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cf513acc5df2380e286ca7e3d2c858c9c876dd21e8cd65607881d2c3072f75e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @chegg/wtai-upload-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed3e4233e6f2d188d7f2bab940bf8574017cf73a97b440daddc7f4e3176075a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-qloud-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06ea09cd18d7a4ebab28f95cbef194e9b6e91e9ce5e4e30943af638e29ba6708 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslintpl5ijginnode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59f8a598ff459a89b43500fa79d72b728ad6e481d7a978aff650dce534b90f11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atez (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ffef2ffaef79218fb7af85f19b1de8c934a145820a5bd20d3018e687e2f7587 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wdesk_sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92b6e2737726d312e00624725849488a2167aede2e262e500b2f42aa884e8e74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ofjaaah (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e1d302f03187762dd88092103f9e08ce9bef197cf9952c175e9f81cd545c84b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-workspaces-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 306ff4b6fffa361d81e979b5ef2a337379a04e79ef23b632170418748925c574 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...