MAL-2025-48180 Malicious code in redirect-ksm5w7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2feba355270c24294faf83abadea29520bbb37968b5b7aed42d3c717a22846d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-8f3x70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75cc50fb739d4328a1ee9c3f1a2b4fe031b53f6a6915b239eb09539463c58858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @testcarrot/supply3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecbc24cc97adb2847161caf543bbb337374513e26dd4d6d2c83b6d306df7f45d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48094 Malicious code in @testcarrot/supply (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27e1f69fb6202f5542f7e1a2def95407b079bad5dd22d4ef58c3f243c794000d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-0g91q6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb8a046d11d2d32600e11bc37ddbb705107cd33d2206e402b33572441677da95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-za4566 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 079f93dd87bd8ef6e446d2275dc64e4b6e5e995fa22a692166b41c03eac59d02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48075 Malicious code in redirect-udmf0u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0c413d9dc0a3bbc412e869fe204f44c219e0dc76756a297396238e79188fb6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48057 Malicious code in redirect-gzixvc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 148d469aec04aa0c8339e4774fcb177101922beb6932fc192b74a658f76b7c2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47989 Malicious code in bildguga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5232dd55f7737f8e53116826bf0c0e5ba9365eff238e7ba6d86b925d8d12babc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pancakepool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaab6dc9e6eb28a86ebbb9ef175624f2afd3649dd5b62ef87ca440b61468a688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oxrvlllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be796eae19919fbfc10cbeab99b4560961dd085f2b2d887e64fd81bfaf7f5bbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47944 Malicious code in solarpeng_node_eval2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0319cee3fc5a00c3fe093de4551ea4ba8efca92792da4582e8571e9a4cfcecf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-paysafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeeeb3008c1c25d409de0b1ddd06dec1567d3ddb75c311c718aeafd606e5f24f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toskasldfjaldf-parser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e759a5c9e8da467a90adc10a682a68df15a878213a5e38a2a5dad06f95740103 Any computer that has this package installed or running should be considered...

Malicious code in metadata-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c93e5bf4059b5ffebc879cdbf901fc2a8508bf82f03b69abfd0ca6e9681aee8 Any computer that has this package installed or running should be considered...

Malicious code in truelayer-assignment (npm)

The package truelayer-assignment was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cb2b1d58a741e8bce6ef15fb465d4c1d070891603626cd0ff81d09e23d05a76 Any computer that has this package installed or running should be considered fully...

MAL-2025-47522 Malicious code in sha256-validation-xyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d087a7f065c7d1c6612320e8fc3d19957b0768a27ea56d1c6849c32193941829 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-serve-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4137b637e880b1add619efe8a8cb012cb89d4364be36dd8607cd4c20bc1b67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47508 Malicious code in webpack-serve-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4137b637e880b1add619efe8a8cb012cb89d4364be36dd8607cd4c20bc1b67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47482 Malicious code in eslint-config-detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c532e5d9ed3c3afdaf7a4a59234c132c6176b491fc96676828c4f0dd5eb415c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...