MAL-2025-3765 Malicious code in harvest-strategy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de22b4dfdf724c0f8cba6b9451ea1743b0a7d6be1256a89d00ec7ae20c3ef901 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3670 Malicious code in antani-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bc6ee4654a6ce0b1ac821dfabae9daec5d7ffc8149ea0fdb78a2230493cf4f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3688 Malicious code in identityaccesspointsrv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7c91d904c61ea0d0dc69c3d616a5b6fc69014bc5694f175191f4f661a33341a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3672 Malicious code in @johndeere-tech/eslint-plugin-timbercloud-custom-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61308d7848e55b8e455ca17307d037a12cbcb121760bacc64d9f8b574c08861d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3693 Malicious code in outline-shadowsocksconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac9c30589865091fb269aa3d3071ffe0d15ca8b8a8848e0363d338514f8b89ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3622 Malicious code in haml-jst-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0d8ca2db3fdc34877d4cbc9c4b109a713c2d744251b47b95621df2db46fc5fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3714 Malicious code in crisp-import-conversations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 695e694069b00b1d669921e34a38537e57d625a52cebab80f5ae8af1221b8377 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3582 Malicious code in passkeys-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10656f77a1b38bf858443c5f4372da8b3a88fc8685d6750ebb92f8b6d6ecde2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3568 Malicious code in expi-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0a80c852d048afe990e5644658ba661fb205972c1aa8f4b074ee3f9c7530d0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3537 Malicious code in nsemea-salestransaction-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 202c3434714473d68a43ed2c7365e4ccde3af7dfe6c2a93a2496b00b88304ff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3535 Malicious code in nsemea-quote-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5af99966c46bd796b931ae02be0aa5469d9e60463ab86b879488fff2e1965c0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3490 Malicious code in fc-online (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a64a01d4995610a37c1690ecaecc64be60f68c266b77ef1c80acceeb303ac71c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3493 Malicious code in green-giant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5124a99877f0c6c7c80799d23850b5b5c3f7f308ecdbfcfba13300c69a3fd72a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3487 Malicious code in cerberus-management-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a81dea17b012ce7621aca36c310cec6946eda16345c910c4537a673db19c794 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3499 Malicious code in myexampledoges (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f73cffbd113f766f9b5e4d0a68d2aa94c67ed0b3521da15d8afab243bdf9e24f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3697 Malicious code in poc-sim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bc002dd617428d821e25cfa749908affae826cf40db7db85821cb7e344418ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3294 Malicious code in windpapi-prebuild (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c10d90b2a66383524d744c13f47a50a2d7dc178d14e8dd14e6167636c4f09f45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3243 Malicious code in fatfingers-hahayeet33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c493777df023436a0434514b500e7841fce42e9f56e3c4249ec74ee0db2dc9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3262 Malicious code in talsec-react-native-security-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68ab8661116d9ec30b2582ba0a9547684e8ad10024bae79f2b4094e5ea0937d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flex-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49eefd4354e4d8c5354eddd891739db212953f6cf5c4aa193bf5470a8e77c820 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...