MAL-2025-47484 Malicious code in filigrean-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b36c0d6ed8ec6a40757f980d71fc37fd950148adc4bec988b34f6a4bcc83136 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4d4bce17702fd04e9d38d97007a2bc8b4028c77159bcd19e1565f71d7f4ada4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47319 Malicious code in jsonwebjstoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5866f0ff5443038e8141f9674f6d4d83ef512aba824b8a430cbd459f9dfba71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ctrl/react-adsense (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc78e701d6941c16bc77a99580c74125deb3045bfb62ccee9917be54177617e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in http-req-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05b36301096608673130a0c0ca70710e71d19aa1f1b849b330ad9cc03911fcbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47183 Malicious code in internallib_v819 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d31ba534b4f8ffc55121d6aa3784d30b023a96d6b88430ea1445a9b838068562 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47098 Malicious code in mcp-chat-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 012cdccf3de8faf0decc2a7294908fdb206cdb5ed9d8c50ab47b7bb2c8305032 Any computer that has this package installed or running should be considered...

MAL-2025-47067 Malicious code in hrpqvq123 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38aee6b985b41f91e9c96ecd646b3c7918e14c51c3d97cacf792891f8f8126b8 Any computer that has this package installed or running should be considered...

Malicious code in moodle-core-tooltip (npm)

The package moodle-core-tooltip was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 216ce2e3393fb5bd909da3707f9792e6b59a5c3697c11bd0bb132828e48a4b89 Any computer that has this package installed or running should be considered fully...

Malicious code in @navancorp/fe-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85c47c473abe59dd1714ed889d2aba7ac40eb668ba9cb8bc5fcc0a11f33c69e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @navancorp/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c1de6ab614103c47766130fafe2ddecb44f6c2cef32971d3da5418641756227 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vanilla-cacher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a170174d56e5363e8c8a3d47eb94f80f3b3dc18a2bf2240e372730ffe076ca97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-postcss-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31b1ae9dbf2d4d4b83a07e7c8d7d340507e18144308970a7cd81c1c6e5dc125f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in obvbd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44f7f11754648bc94be283584503467c19579c3be10da1b59b66af2cc6a509c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mydealer-content-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9da35bc1c296ca992821d1f1281d06c374f7f4c286a9fabd69faec84e55cb902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in firefox-profiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4487e2a5882ebb5a6d35e69c7f4644df4cebad9ed4660d01cdcbd6d137dd82c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in one-fixed-dep-bins (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d275fc55fd1295739e28fef0ec616a970ad488e3ccc4fcb183fd48d8494815e Any computer that has this package installed or running should be considered...

Malicious code in apple-keto-acv-gummies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3431204b738da9726bd553e79f2bdb59fcc81bbb87b633b959947a1d24675da7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonlis-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fce7376d51c7762ca92d6e8e883d0149c250a44d92fcdea76667d07c5b584dff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ado-codespaces-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acd2e4a00a6fa99e47e9f10ae7238f2faaf2dd65d07678a4f33037a25ef636c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...