MAL-2025-4820 Malicious code in commons-fileupload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 176e367d438eb3f5463d593e36cde70f38d1f86a0af240ea8669e0c8a25ed516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4816 Malicious code in boost-iterator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c267aa9b1817904f849e9905ed0a7609d16f046da58d1954f222330503778c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4726 Malicious code in connectnodewebclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72fc085bcccf174a0e94231d33f82e278941f6a8b7d9fa72f1f83ae85902b993 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4763 Malicious code in samba-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ac75992403506206a4cac9274cfd007d488518e22ee13ded71dc02282208b71 Any computer that has this package installed or running should be considered...

MAL-2025-4704 Malicious code in stake-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 505bc2ea5f7bcdaeafd338ab86be15a36425335f5d45c1b2d5d03d43068ab07f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sasmeee/igdl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50d2d88fbf066d2cf61e4e0c78589fb68f9b35f261c3ee3bf1c852cb431272ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4678 Malicious code in @sasmeee/wabetainfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7027d0725ce64bc70ef8e7bfcafb2c6d3bf6101d0c98cf6d2e52f59a04fd87ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pizza-delivery (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32883280f27dee6f08c25f84fa750e17fad3b3193488b14da6a77cddf52ef582 Any computer that has this package installed or running should be considered...

MAL-2025-4679 Malicious code in chatbox-fca-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83a5b117803c27e7a6bb055ed45b86878c6edf34dea10fa6c638486c656c6ec8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4682 Malicious code in espresso-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8ce5ab7d96b084c2116afda967b080d56ed7a0dad48fe8ac7b67a1317824e8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4683 Malicious code in express-api-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efac302be698778eb5fe49cde2fadcf3d675910622eaf3387754f96e332f87f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4696 Malicious code in tradingv-scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d77275e798392b8c057b8a2e84fc0af74d6d01c3a2d426ee0b05ef9ce80a6b3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in viryy-nexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83da7b12f8cd7a828569d2936d55759bc96ad48760ba8ea0124dcf612721e671 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4648 Malicious code in node-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 843fe1d3338e398ebc485508d20455b921ed8e3cbfcd3fd1140d4aae32d34109 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4660 Malicious code in verylinh-sky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7a2f858becbec37d67893dd85db5e5b64fdc82bb1ff3d81c07e18868c059f86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4651 Malicious code in parabol-action (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d82468091c3a867fd7981eef0555f14edc29822f932782c0fac1bf9e67a15d7e Any computer that has this package installed or running should be considered...

MAL-2025-4627 Malicious code in log-trap-catch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dc12c22fb18702b22d35fa127f4f43058dc50f65393e6bbb1d666b48bb7d905 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yaml-mcp-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63f698f000e6c4702e971dcd3923f64bd9039710fde38e7329b170ba0266ac01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4632 Malicious code in rose-web3-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e7bba39177d14d11698b3ccaeca36599df068894146efc99d0ded173449d9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4626 Malicious code in cx-hub-interaction-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17ef553f1f7cb91bd70d99d55deeb1c83c604b68581cbbfaac1f9bddfbdbe6e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...