MAL-2025-6092 Malicious code in grammarly-editor-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f24713f82fc90957a8e5834da2735094adc919b65b81f569360b9b8b1c284873 Any computer that has this package installed or running should be considered...

MAL-2025-6204 Malicious code in user-interaction-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d839a2d1eeb7984171b027d6824db93e6a9c11b45cba2883397dad6bb7744e8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6183 Malicious code in navigation-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39b1dcf034a843e18501251d3a3e0d37d413b30645566c5a4c80fc17aee8cf15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6191 Malicious code in partnersservices-payoneer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bf0e98f995aa9aa5cd789c9dbcefb1c5c5320bba054d2c3c75950c65010ae5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6186 Malicious code in nf-cons-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e638446c9e65c64ab2f4781b57b182ae1de4c1da746270215e07e09992fc954e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6175 Malicious code in kiwi-module-seo-featured (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c24e834cb597541f0c8dcba8a3ce294a90caaefaec74f82d2e208a5b590581f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6176 Malicious code in kiwi-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dcbebb4e37e86a0a7878eafb520d0acd1ad5d8a97aabcce547b807bddec6cef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v687 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6318396222e5333ad64494337976e8a02c2b768d761e3cc59c41dcfb18e57570 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6197 Malicious code in scenes-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ede91952fd4d242e34d4fdd634b5d10a0f0d16145af1bfbfe011b8c5c1d02501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6163 Malicious code in get-latest-workflow-artifact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d2fe1e8a2dd5f7f462bc112e5e6f5740518b4ade0c28f710ddb195f0415cbdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6017 Malicious code in evmlogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7f613dff9c5a8240615af13856874523566cf158ec5fb8209a17f98b2359c50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6019 Malicious code in websyncer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f28928dae23e5b709d60631f287c84a15f4bf8bf64751f67c67ac46659174837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-postcss-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0637d37f1a6fc3f427c6a79a64570aa5d30ae202fb9a5a98031c38b4dbc27ed0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6016 Malicious code in vite-postcss-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0637d37f1a6fc3f427c6a79a64570aa5d30ae202fb9a5a98031c38b4dbc27ed0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5990 Malicious code in xeno-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4584c129d15f1b447b33ff8077afcf4b79d34b44dd6c9752ffa9a028790f9bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5868 Malicious code in @forge-ui-components/media-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3352739bbbfe79ebecd02fae7c7026cc29a1c947649126c59f096d8cd4bbd02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5873 Malicious code in @gdcorp-commerce/cx-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28edf91ea21172ce7f3ff12d49071830bd423ed825a3b22b8e7228e1091cff42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blue-einsteinium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d29bce29ab50051cea7b565e77089c60c66a34ba8f074b85f8e835a25e8c7f49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5934 Malicious code in lime-thulium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a907ea9dce24caaae763586a97ec2bbd30c827e3f5dae239e43c2094b535bfc3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in parser-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f76c3bdd99ca88025a5db8d68b9d2af5c7cada21d80042f568ea821e9c22b8ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...