MAL-2025-4589 Malicious code in pancakeswap-oracle-prediction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3439b65dc3de1c6c43d4ec5ae0e3db4a1fe713e0606f8dc3037ad22dd5741467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4528 Malicious code in gitdependencyresource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83fef2647750041b69c08748c2113e2bacb9b4cb630d247951daa865f4ef7743 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4506 Malicious code in skinnyvans-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4548827f9bd601d4ff29713865fca74fb2e28b90aae485f5656f48ac2a6275e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4559 Malicious code in fxa-shared-110n (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a889f866a4713ec27a586224044a1fb0c0bb783cbac2acf7870cc6a07df6c76 Any computer that has this package installed or running should be considered...

MAL-2025-4449 Malicious code in rainbowkit-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83ed1e8adb99f97a9039322cfdd84d79db451f0945c567837f21ecb05d6fc49b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4415 Malicious code in utility-capsule (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba9654434a81a009361bde687be9129ce9ccf194843c4fcce11e61409e4346ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4291 Malicious code in 12octsportsday (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c79a0b726d25448621e84a3424b411c1c37c89b80d5a5c4286857fc61ac52257 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4349 Malicious code in gacha-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d266c3cc45de6b63abc8c3898219a97982b9c5b400cc714f0cd62990fc0353c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4077 Malicious code in envjsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4aa332a40264890a2b2256972f5b88920d7bf693b89832d9b3b5e17561a5db8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4030 Malicious code in ttd-lithium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73c711048944c634cd49e0952d573c5c48f00dd01c409ae7ddb3848ae960a6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3980 Malicious code in affirmv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37426adb6b2eb639d44506bcc9b739c4ffb2c7b93c57139aa1757972f6cff5a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4036 Malicious code in vue-dev-serverr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a206a0d6714ab34f1c8c8d7893e516f6babb7bb3bb786fa679bde0c300e4815f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3953 Malicious code in inter-frontend-lib-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20b043e0fa1aadc6d1e400a275d7c543cf31f466a312f5cd286fed159f700ec0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3876 Malicious code in codm-lucky-shop-pss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94fa7b770ddfee08869eed0cd92c1d8ab71d6c0d3a2c52f2cd4b7688f76a84f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3928 Malicious code in xero_ruby_oauth2_app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df775937f934e6eee2161d71e8e61cc59dab858b11abd32721c7bb957ab91ee1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3921 Malicious code in ts-db-indicator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9556592a185a149af4a877ac348199cd0c69faf0fed158075c976b00585f8a3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3918 Malicious code in solana-web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87dd8c18d15d4abbb750627cb9dfec4be3cd3fa1e2ae9d2ac8113cc0597f43d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3858 Malicious code in unipig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd7ac3cdec95558ed3e5a4e37325f492860d532de1cb8c3013e53a21ee441ffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3848 Malicious code in openidconnect.net (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25c68fdbe733e629344de7da078e67668a22362f0be388e127a2d2b603dabd43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3834 Malicious code in imran-photo360-apis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50eee3813bcaa9eb9f2b3a96b47f8822b60b91073e385c5d3161fce029d42287 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...