MAL-2025-47950 Malicious code in orvlllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ea46288aace45a16a2644e135cc0a6d6d0b1e5c276e3fc9d7dc2ac48369fbf8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solarpeng123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82abafd54fec90c9d7c9a4ae67d1236cca9c5d03fc30eea07ee7a6606d66cce4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47944 Malicious code in solarpeng_node_eval2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0319cee3fc5a00c3fe093de4551ea4ba8efca92792da4582e8571e9a4cfcecf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solarpeng1234 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90f041841d26ae1bcb4d5908b14cc0665e231e04bd5b75967aba62b6d80e13da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47943 Malicious code in solarpeng_node_eval11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d505d754723f0cafa2002bd7faec5450dcf9decdfd33e05744ea770ff97ac2fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47930 Malicious code in my-ttt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e183b31e3dfa7feb3d5dcb77d854dc97a37725947d01080753df10123c5ece3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hex-validator/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25655f70d79110f8ebcab9a8760766907a283e49147ebd961e97b0009418cc1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47917 Malicious code in @hex-validator/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25655f70d79110f8ebcab9a8760766907a283e49147ebd961e97b0009418cc1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bs58-utils/wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c802bc1898c7a60b65bc2c2b2ce4d2c52bb29a73f0b93faa7c4e6e60998d32cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-paysafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeeeb3008c1c25d409de0b1ddd06dec1567d3ddb75c311c718aeafd606e5f24f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hrm-absence-frontend-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e83d68d053c95b30727ac72a2707c8add3c6426eceeb22869d8c6536887ad7f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toskasldfjaldf-parser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e759a5c9e8da467a90adc10a682a68df15a878213a5e38a2a5dad06f95740103 Any computer that has this package installed or running should be considered...

Malicious code in metadata-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c93e5bf4059b5ffebc879cdbf901fc2a8508bf82f03b69abfd0ca6e9681aee8 Any computer that has this package installed or running should be considered...

EUVD-2025-27984

Malicious code in bioql PyPI...

Malicious code in mockup-plugin-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 558235acfe4f70dc63b4fc13a84d52053efc759496cd14e3be1174f7ae4ee3df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in importlib-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a22bec72f60bb7cc973586a56fe04d0278d14854c10f0e3ed7b88dc7dc556a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47886 Malicious code in importlib-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a22bec72f60bb7cc973586a56fe04d0278d14854c10f0e3ed7b88dc7dc556a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47887 Malicious code in lovable-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 903b816cc2c837a614d951c1cbb34aa264a93001e84b0c642687025ed9793e64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodeapi-json (npm)

The package nodeapi-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adf38cc7ff9fedd8e0e5018c03c9141360823a8c5143181264185160ee040728 Any computer that has this package installed or running should be considered fully...

MAL-2025-47836 Malicious code in vite-next-logger (npm)

The package vite-next-logger was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b63f6a228b94e3b3c06e0d3e65937daa9e46eb2a5f95296fc24823796fab6fb3 Any computer that has this package installed or running should be considered fully...