MAL-2025-5890 Malicious code in angieslist-office-app-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ef02b48854bea0c3c7e012377ff6e37a2ca9b371c56552ac87a3ec84a8ec098 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5882 Malicious code in @vapc-ui/search-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0da3194dfccd7f133907c4365b33fd21321477bd320e54e9115a90f0076ece9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5856 Malicious code in @segmentation/gf2fov (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cca9c2565b19f690b835370484ad318ef144e452a6bd93f7fb9461803f3b5cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5854 Malicious code in @happyfoxinc/react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d35adaa5c8720836c739e2315328f940d5245dcc4590ffe7ac42b1e465b31388 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5858 Malicious code in @stride-mfe/wmc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77cc9defe144c1f3b98ce1ea8f91ca33aaf789c8ed02f2ee137861782c89f711 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5785 Malicious code in jquery-zoomer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acbf4e3c76ef6d0551f9bcc3420755fcabf7d985871c714a3ea7cfdcb43a6d94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5783 Malicious code in intel-gdb-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9e59a0db399c7f1fa0d97b250969ebd703c83cb6c7e03b6ab8a3ec34f67746d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5718 Malicious code in prepare-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce87db23628075e87a946b6117721f8fd2f272b5d93e3447e78b58a4a09df2af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5700 Malicious code in htmlbars-inline-precompile (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c4a212f0a71820f5e5ac4def1449d454a87b95082eae0de676cc3e27006831a Any computer that has this package installed or running should be considered...

MAL-2025-5609 Malicious code in pupeteer-cluster-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fe95354a3e77909ce12723e8b6920602c16294ebe131716c947de18ed799d18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5597 Malicious code in @figshare/old-viewers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b582af08f54b24b027eb8ffb5e56e63e4efff4c947ef2abb5fc552a7476539d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5585 Malicious code in taskrouter-event-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6bba47f8505eeeef34953080b36ace84d8fd303c36ee00977a2d00f9447a4eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5345 Malicious code in github-datasource (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2771dacd93c395c86cb08e3778a5f1003eb477b0338d318b052586d73a90eaae Any computer that has this package installed or running should be considered...

MAL-2025-5337 Malicious code in themeone-animate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e147615a6d4e51665cb5f31f094f28cbb4c79a9c3ea92899c8a0a37ea40bb4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5512 Malicious code in notification-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31994ef5ff64a19550b3e145bf17d885b0b7029e463eacfbec340db313a954f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5427 Malicious code in kkyun-xss-payload (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bd0f20981bcaba676437572f6a28aaa3906a4f60469e5250aeb06dde75cd461 Any computer that has this package installed or running should be considered...

MAL-2025-5226 Malicious code in fix3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a570744f3eb415e9f6dc103a46162807ae15fcf346c531393ee20268c83b660c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5364 Malicious code in ati-requisites-form (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d64ef4d7097080d38ce75ebf55cf4aea3bdaeecd2d3fef759558b249ac1abce Any computer that has this package installed or running should be considered...

MAL-2025-5186 Malicious code in styleprefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e908c22303869cc7d5722a3021d95376a9dd8052acef7cff8d4ec6454a3edd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5165 Malicious code in js-log-print (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32f7c2522ad9654a06381397d330bacf9a768718488543199f85362870ee4d9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...