MAL-2025-2682 Malicious code in kagi_browser_ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d43b7fd2a47594e2b75e6634bd546cec8f3fb5d8c20181ce0f6ed15e368a91bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mathjax-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5b3b67677f9fc901fefa32f5a65afd65ac6a199d7ebb72be98b9ace3dbbad19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2619 Malicious code in my-account-end-game (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware affc2e67711261a8284c0193acc1a7c7afa56ee2693d1c6ca1d5cde32ca11376 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2577 Malicious code in my-local-b-off (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55183046ab5c00a4004d794bf477003beb964f8267681dcd3e19c8cc97c628f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2569 Malicious code in cargo_metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9d3eedf8c61044a49ae7f685d71d0d2bb9188386501af2b6fe7d9b32960d6ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2572 Malicious code in glide-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d409241307b24e525d30789ac32c9c3d770067a65cb45c454ce84b4c9b123c8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2565 Malicious code in airbnb-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e763bf852511956872170a0e0f35a90f9cded742c1b3e0f42b094bf3f13e224 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2536 Malicious code in tokesjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77cf2bffbafed158e996b9fb6581994a5dda5f00137197ee10e3538b2e68eeb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2515 Malicious code in micropilot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfd0cfe335da0d48c9b22437f9ef4eee817052ac3d511a715998df91ca0b287f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2461 Malicious code in dexter-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 004306bbcac485618bf220d12e4cf5870da6b06f07741f2efeb35b44ce3dd9da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2375 Malicious code in ding123123131 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45c68b87a0d236585f3f6cc5b18c3d73a4948ada4344c7a0a6d97f2c81db0364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2417 Malicious code in spark-botkit-servicenow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db9e7b07208198145174b016dd7c98f443f46d0605e07e3f8a84f24f58efd4ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2361 Malicious code in app-bridge-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 933905ebdc76407c4ff291a44e25a77e8a04375225a902461a37355fbc45e0d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2421 Malicious code in tfjs-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae377a98248827b019055c5171dbcb50bf6eaeae0dd3c0dbf2bb48146fb6ded Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2426 Malicious code in tsl-card-body (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3b827feadef7c2656600460243604631e02bc0a0b8ade3e8f317a7a5964ffd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2360 Malicious code in apache-superset-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1661502573ce2ee16beaabec0853d68140a4e4aa5372720f3f20359cacfaed78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2387 Malicious code in hoist-non-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 424865e2aee8385bd2b6cf103c939dc9a1d3d8784efeb6d8f197d71de928340b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2364 Malicious code in bigmoneymaker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5a7f8b17862637448483bb3cd8eac9fbe844b262ae08f8ce008d0120ac8df86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sheingroup/niceshot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e1bf648734c0bb8b2f194c37cd38507d552d4ca5cb851fbc6c751b6fb1bfe69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2326 Malicious code in react-event-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7117f482ca3c7fec4102581d249b98a017fe0b05eb1dbc836070e0f0c8b245c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...