MAL-2025-5184 Malicious code in microviewreact (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb4aa3ed998e2cc248404754caf11f331bf993d7eb37d5eabdfeb08402bb69f8 Any computer that has this package installed or running should be considered...

MAL-2025-5013 Malicious code in obfuscated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d559efbc8df5a64ca2676526a199174c0a877291c1cd08cfb8db6a7536aad530 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5011 Malicious code in example-malicious (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35d3703ef56e66529b1b9ba0ccc6cf4e863591347a634a085a46636f082d79c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5012 Malicious code in metaplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56094c5aa47c7f90dabdf4a647d1fb79534f42102ce0ea011b8fb4bc0aa398a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @evg-ui/lib (npm)

Malicious package. Executes hidden script during install to exfiltrate local IP, hostname, and homedir to an OAST server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee183b500af41035df15810e8e96ba76cf5a758c7d6d647678a1c3930ded627e Any computer that has this...

MAL-2025-4966 Malicious code in zxdb (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b6e6fbdc6289a7a4946e72303aaeb98c9b837470df312ade4e634a7fa81fa52 Any computer that has this package installed or running should be considered...

MAL-2025-4982 Malicious code in comp-base-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86dd56ba61a953e19112e8fd19d04c755f48e262186426a358a7251dc398406f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mw-remote (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deb98a28a6d1cc05645c39a41adf2da3f193d98223ed6239c39e5bed50d1ebbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4986 Malicious code in mw-remote (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deb98a28a6d1cc05645c39a41adf2da3f193d98223ed6239c39e5bed50d1ebbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4942 Malicious code in solanautil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a994a5a77cea13db3655b647260e91eb43eaf01123269218c0378fdd8d94db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4939 Malicious code in iclpacket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0efc8dce0d882fab2fa310c21c96d189d1a393b72739e5bec75eb77019e1eb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4921 Malicious code in frontend-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84270f7cb41eec813ccd947f1510d8849dc7ec317990d0be20450a14a28d69e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5032 Malicious code in error-ux-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476bc83dcd99575742060ce7a3f129b15a4da89c0605ae7b4eb57e4cef54bf8b Any computer that has this package installed or running should be considered...

Malicious code in thisisatestllll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2feaf463b5dc4c05046c75b03a21ba4672af2d3b4af04f3b80dc7bd9768179d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4893 Malicious code in talkingagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3405c426e57de2c17c74c5c754610648c613e377d1b63a59e24d767241599030 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4775 Malicious code in vite-plugin-esm-federation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f7926dff38c759aa63ad9b55035d541c0512f6796681961dcd734e4d77cacc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in server-log-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98c5b185c67de0bfe5bcf39953a89a1ffcb666e055d24d971a6926437a672f1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4888 Malicious code in springboot-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 767553d0189c47e072ca2eccece5b848745a1f6faaf34987293d9232d32f48fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4906 Malicious code in vue-coreo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1167ba130b5705599b06b2fbc88a331c7b50940fd3228204637781cc9b6df0a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4903 Malicious code in ve-vores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcef286db1ecd73863ccb186a0860866493f59111555883f1eeea823933a163f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...