MAL-2025-3087 Malicious code in @bmw-fedev/auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaf1cfd96aa6434cb73b22f2e38fda0979e7847fff11c575bd67ea8e2f09c8f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3109 Malicious code in nva-direct-showof (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d8b4952e45ae0f21b713b389d983c27d4b09a8410a0416bfd8efb2b2923ff02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3044 Malicious code in @hongfangze/guid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd7220c6bb13c845faf097d4684a1e9ebf6bf2d825956bd8f565b996a804a193 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3055 Malicious code in @hongfangze/string (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91ee35af30acd3517cea9a097e00846a80a50fb6888854e7356c5175841b91d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3051 Malicious code in @hongfangze/proc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f03a11e4b797bafcba512ee070a89bb308a5c0822ca5da8a5c5b580d8269c326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3032 Malicious code in @atulrv1day/unusedpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77df872b6f487ff391d16643aa0a160f89d08f54054931319a0bdb4bc172aaf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3061 Malicious code in accountlifecycleserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16f34b0df0c6872e171130fd0bc4e705f393a5c3a6160b222dab34564f599b92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3030 Malicious code in tap-hook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38014122a47ebabc0283f0c580225739db6f224a32ff0efcd2654bb06b9f87b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2767 Malicious code in invoicetax-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f20c92dcf9c299f39d6c6dade3b2cf88a9f249913877843b3bf54c6520eff9b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2789 Malicious code in timezone-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dad5ea04a94ca53aac985d529d7818721f79a32388872b0f886ecd9af98385a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2777 Malicious code in oasis-os-theming (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c78b9623607cccee2c32ab0a4090f9758e28614db6074a8a5dce410658c0ae0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2646 Malicious code in awesome-camera (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0049f4e25e583544388265d12d7760dde826982f89f8dae49f1e4e544f25bea9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telescopetest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa29b9ba0d788e8dc9516cc458ab02e3fce22faccc63522b0f1a6caf439ffb14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2640 Malicious code in adfg-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b55ff503acc60e4d643c5c89cdee6d5683773652723b957ff0a501cb1e493e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2722 Malicious code in wzdui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cacd050cea2b1850685666f4a7e40c1d2564107415007d0235ea5e0bad8ff1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2681 Malicious code in justinmimbs-elm-date-extra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11af7440e5eacd7d966f3a8948c08a28c29eff3b39493714c76c2deec71592cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2682 Malicious code in kagi_browser_ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d43b7fd2a47594e2b75e6634bd546cec8f3fb5d8c20181ce0f6ed15e368a91bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mathjax-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5b3b67677f9fc901fefa32f5a65afd65ac6a199d7ebb72be98b9ace3dbbad19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2619 Malicious code in my-account-end-game (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware affc2e67711261a8284c0193acc1a7c7afa56ee2693d1c6ca1d5cde32ca11376 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2577 Malicious code in my-local-b-off (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55183046ab5c00a4004d794bf477003beb964f8267681dcd3e19c8cc97c628f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...