MAL-2025-6147 Malicious code in airbnb-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a1d7d33c25e202a6ad49fb54065863092fb024863cb59952744ea002c333bab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6018 Malicious code in vite-lightsparse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10e940b9ceb264d366ff66c1c0dcdb57cf63b7a7664ff61db7b18a4523944e4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5999 Malicious code in nodemailer-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92fcb8bbe96410119e865394273d8185c940c7b31957a92fa23e23c4e893ea8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5947 Malicious code in pino-req (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2659b9b4bc1c25e48f12927e3b920f8b1eacccf6ddd951b110537a31a062ccf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5946 Malicious code in parser-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f76c3bdd99ca88025a5db8d68b9d2af5c7cada21d80042f568ea821e9c22b8ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5914 Malicious code in flowframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26594c7af803e5fdd685615007a51b104640aedcb8c6658ba144125358c38fdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5799 Malicious code in tv-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware addb927c8910ec93507080bad17c52b12df866249c823ceb79970bda06bc74d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5693 Malicious code in frontend-release-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c7b669533af76df1c26a09f15c4e4251d5ebc14cfaceae8a7af9dacbe4f8741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5686 Malicious code in elbol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b99a8bf6adb423e7d8328ec1e179ba48ee34d663ab80a55b1c27d156605413f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5691 Malicious code in foundation.util.triggers.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83bf60b2f5ebff2152502dd84c2d1275fe67e6eb08d9ce2937e0bc3de9f113a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5676 Malicious code in chii-aungpao-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7612d6bbbfb9dc1ad7c5edf5f536d13eaa4e20da2e1a895caeacfb8b0e75140 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5608 Malicious code in poseidon-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90aead430e86dd9f204e1a8db7e6adb050c5eeae8a938c3d570991ebac4c8ac4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontend-building_blocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28828db7648dd2c99bf1bbda884e9f12b8f0a60ac0068a6c12e5ed0ce79cb651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5522 Malicious code in tag-rotator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe07dd4d2b5a47e282c44e56fb8ca54831d4a240a4988279625494f2487c6d9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5494 Malicious code in dm-cloak-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbc446510f88cacca6d96ebc43436a2e388738c2bc236f8a356f4c11d25600e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5529 Malicious code in vite-plugin-next-refresh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9098ebfb041888a88d100e173f83f951824eb6f393098d122919bb472a320dc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5181 Malicious code in internallib_v210 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff8e95541aebca54707b7c8e6f95764f12ec886f6adea6b072aecba1bd5d76cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5158 Malicious code in eth-auditlog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aec778b05fe218b568dcb73221cdade5489641b92ce59e4baf3a6b50298bee0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in comp-base-photoupload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5adac5ba125addda078885f62e39385b133893d4eb256e54e6761899c681a6d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4938 Malicious code in husky-es (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7389701dece7abfcef40d0bfff8c26f78ce0a68100f40bff5e834bf57d6e637 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...