MAL-2025-4924 Malicious code in ac-shared-instance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25b7af9d106463b8924808d5fee450cebfb97597573f764e76939e297a483174 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4929 Malicious code in thisisatestllll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2feaf463b5dc4c05046c75b03a21ba4672af2d3b4af04f3b80dc7bd9768179d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4774 Malicious code in cwttools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca62534e7711771b6dd288ab65012fd737ec6e0fc380035eb827dddef397ee86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4902 Malicious code in ve-cores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e2fbdb6cafd7eab8bb680d66240f47ddaa35deaf4c5b4263899fab736fd522 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4872 Malicious code in react-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea18e81b4f8dd9695b27d71a047d0e8f2e6c2bb52dcd1b3b3f19cde0391c2fa5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4850 Malicious code in media-recorder-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a0ea0109d577f9df113fa325e2972e99d701b2a51a9453305c09381bd93d902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4828 Malicious code in espresso-idling-resource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 783a8905e5ae890747d02955448c18b9e8ea3bb082a9c12d5eea209a54c33297 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4770 Malicious code in third-party-dep-a (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcc20155246302fea26b0bb40126bd6b917414a68ccedf962a12e246f3696f38 Any computer that has this package installed or running should be considered...

MAL-2025-4765 Malicious code in staging-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 061358db77d2084ccc01236a956a493bd28d6e2f975a14bcd9651699a3eaf352 Any computer that has this package installed or running should be considered...

MAL-2025-4642 Malicious code in figwrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cd13bb1130e41b3a2f595500f734384befef8c3107668edb6c2595730a13ddf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4728 Malicious code in actions-languageservice (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acb74af5f6a7d398be58bda53f50ba2f8e6487b53678077cffda3a4531ecef4 Any computer that has this package installed or running should be considered...

MAL-2025-4629 Malicious code in logs-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef4a1814dc93accc153af6842fac26c03f1a685a3e32f0bba0fa8b91ccd0b2d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4625 Malicious code in chromecast-caf-receiver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da9e3bcff87fe759eb62b6219f1c17a42827aff60b6c54f8948d49f99ca5d015 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4606 Malicious code in simpledep2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 785bcea7a5a8db24e8f8da4bf42202ea0b4bc0a1628446dd0c5275e964bc422e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4589 Malicious code in pancakeswap-oracle-prediction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3439b65dc3de1c6c43d4ec5ae0e3db4a1fe713e0606f8dc3037ad22dd5741467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4528 Malicious code in gitdependencyresource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83fef2647750041b69c08748c2113e2bacb9b4cb630d247951daa865f4ef7743 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4506 Malicious code in skinnyvans-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4548827f9bd601d4ff29713865fca74fb2e28b90aae485f5656f48ac2a6275e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4559 Malicious code in fxa-shared-110n (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a889f866a4713ec27a586224044a1fb0c0bb783cbac2acf7870cc6a07df6c76 Any computer that has this package installed or running should be considered...

MAL-2025-4449 Malicious code in rainbowkit-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83ed1e8adb99f97a9039322cfdd84d79db451f0945c567837f21ecb05d6fc49b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4415 Malicious code in utility-capsule (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba9654434a81a009361bde687be9129ce9ccf194843c4fcce11e61409e4346ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...