Malicious code in soxhob-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f363c792232ff069ace1465cb749f1af3aaecf8dfac04cfd380891e6e92caec9 The package soxhob-client was found to contain malicious code. Source: ghsa-malware f87ebbd60bec6fb45dfb478c7a9bd94336690f19c4870e5ac5766c9d864a75ff...

MAL-2025-49043 Malicious code in sort-keys-fix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fd040f6b48ad761cb38f7172921ad9f1a82689c1ac612e6f936271eaf1f08d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49051 Malicious code in transform-react-remove-prop-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38145745ad3f626f3b5d35e2d923d4eec412bed8c0e4d5532dadbc5d53e5ff49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49078 Malicious code in zeus-mex-user-profile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fc81d9c5665e17c547b5f656a72158c37bbde79ea7dab611838f87e54a37833 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49062 Malicious code in ucbuzz-web-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822537afdb770182527cdfc92395d4fcc57ab88a98e6958ba68f93eb84f119ef The package ucbuzz-web-common was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48926 Malicious code in four-sdk-aes-ipheriv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d8d19d191eddc67d0a2a9f1987b679d130fc16751d12748f1412508aa114dd The package four-sdk-aes-ipheriv was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48935 Malicious code in shopify-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974d73b54aa22ffaf8dfee7094b175bea558642ea43dda60cee5bc58b44ed17f The package shopify-ruby was found to contain malicious code. Source: ghsa-malware a529d693e0fe4a67a348d26b2117b4b314994f3378fa0ed92576c915cd5dccff A...

Malicious code in agentmono (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b99f3b1dcad52f8f2c59db3ae476dc1f7a0befd8ece95494c36b13e5023029f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48785 Malicious code in web-vitals-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a1207a63be39e0d3a2b8f5721ba241bde1b85c1246c5de3ec904e8eacab4e90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48581 Malicious code in node-global-win (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0e452b98f142332c84afc6351d76f24422e6a084c3718af17d6eb29b1c20643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48585 Malicious code in tailwind-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b6d6c0aead094725047d0ea623f7c50d3f1c9634f1381cdf31a484100178974 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48539 Malicious code in zdachboostv3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 233422c1963470e7902c9d0ad359d0f6ea728179b75d56e24833feea577428ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48300 Malicious code in lovable-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bdd25899ff870aeb3b0ade0eb3b9d360a82f3a71dd4dd872e8f3dc4019ce982 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontend-google-tag-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4f6a0228c6c8a63f058b39d72aa7f23d1f92b03e46a8f5dff1b1f856bbb6306 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodemon-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc5fe7289f6c5b97c4b2497e93d57d3636f6da1242e0f9d36bd0211a326f344 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48269 Malicious code in vite-next-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 349c5908fb3c2430a77d9a6c96edebbbbda04c5d50a0826b4c0f7e8d002ba345 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48249 Malicious code in mad-1.4.2.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d0a5225829fc638c078c685eb6af4bed3caed292f068beb8b26ce84158e7cbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48142 Malicious code in redirect-byj4f5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a31729d558c71475e9dea8784eb2952d9df6561e5218a142f4d4e51debbf0ae5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-hx522h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b98a6254d4dc012089e64b63b77fd08896ebf0848e2c08aa73fca7e128a6c13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48170 Malicious code in redirect-hx522h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b98a6254d4dc012089e64b63b77fd08896ebf0848e2c08aa73fca7e128a6c13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...