Malicious code in parallel-coordinates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a6532ff0ec9ac1daec9c21c05c508de189c1f5d5012fc6b8aee4feb9ce2b43 The package parallel-coordinates was found to contain malicious code. Source: ghsa-malware...

Malicious code in abeya-tg-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d3c8662c688eccce2f52334ff40029218abfe48b990a194be49c6e01f5fb57 The package abeya-tg-api was found to contain malicious code. Source: ghsa-malware 01b4d597b84a4aa049cd970002730cf004fb59ff7fb53a7c70196644a0c047e4 A...

Malicious code in bael-god-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ba754b9dbef244bd2b53886b1f45560769963fb3cec0acdca0b97146c4748a The package bael-god-admin was found to contain malicious code. Source: ghsa-malware a5f348ec1bb90ae0b0173cad94148bc4e8942fd31411b6ae86b2a81f71aa4587...

MAL-2025-48968 Malicious code in @gitlab-test/yarn-v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f274342e8c6f4a200134b68b571eb1eb5d9f01c5d28f5d445b0da3fff6808ff1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @aio-commerce-sdk/config-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85b2c7fad2af3e611f7fe4d8399529e1b897e4ca8838e1a5db0a2c61acb4d998 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49056 Malicious code in ts-react-important-stuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f663ee64d0eec8043b09ffac22066bd7622e149084a6cb99f128fe1f0ee245e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in acme-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b71a81b10d7836d7a4aeb72b36d2d7c0a4c94e7697d47254dc9c15ecd803bb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49026 Malicious code in no-only-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0357be77e7b06c343a0d5b8671fc3a8983d9d1187381a5159b3175a579ebcaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49087 Malicious code in geopost-angular-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b519cc34afbb8ac8a6adcebfa4765a2553ad14947386e79821c5ad76ad67684a The package geopost-angular-components was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-modal-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f83da8504c0563910980ac20ded60f00f0dcec4e105148e06d6115d0596162b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in generate-delta-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad06efd44d16d4917dd43ae0c9464faaffb8c5f2db9f3b8b3a94a36de4722ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-utilx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab60af52b9e400a2e1c3d1ded16c4d31065881c813437a8951595cc83e9a3e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48405 Malicious code in company-access-pending (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddfec3b870b7eafccef0a535e03adb6bf0728eaa79ca63e248fa07593eb20361 Any computer that has this package installed or running should be considered...

Malicious code in react-ui-toast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6789082e9bf3c52d9daaa6abb3f09ea5012ad93106de355e66a04ee1be9c6605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in melichat-chat-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83c2d41e4c7fa96605141a046fcb172ffe601946ad931be7b5e96e935803c75f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48273 Malicious code in buyingflow-core-nav-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94b6cc0a729e266013937adc920cee3c7c57f6c4ef99bb5d08cc79e3e0ee9163 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48251 Malicious code in mad-10.2.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edbba59677096ba6cb6e726feac84ffde07fbf44a251eaafd0502902b914b5f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-g0ew1n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fac493760d4e93ab9e42b4b72292751ed46ece05541708450919e3e7761fd53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48230 Malicious code in redirect-x2giv7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949ffee0c03450b4909e3996235aef4df042da23288be3f79bdb7a9357dcade4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-1wc4gw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41fe6c9bafdaeb273178f0f0cc9ec19f30ea4e747a6f34b46d6f5e1b4ab5ab25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...