MAL-2025-3889 Malicious code in flipper-plugin-preferences (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72ed77743cfbbcc3b9082b68fd1ebbfc81e78c93b7b73d1045b70adae1785b8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3925 Malicious code in vue-gop-authenticate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5f8092f5dd68ba9b719ca6f042e84c396704214bdaff421ce3f8b933fa7e302 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in seagroup-assets-management-system

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in beautiful-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 366a123a150cfa4f12f17cdb337ca0d39a1b8c22e7d861302e8632619e51bf4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in solhint-plugin-chainlink-solidity

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in lrc20-js-sdk

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3897 Malicious code in internallib_v370 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c10422740b7cbb39e0369e25a7deefc65842295a36c5fb7c6d10182737b2df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3898 Malicious code in internallib_v625 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1942504b21b62677ca1a746463bfce2153d3915179537f0621e9b1adc4851b9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3866 Malicious code in @by-device/fingerprint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0b58f4a1374ff973bdb10f587a6d3bc80207b12a8a85a4edc4f3db66139847f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in rollup-plugin-remove-import

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in feed-testing-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3895 Malicious code in interaction-tracing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df3c2eb4540cdd7edb46dc3730a71a443bd1e3e63771f8046407a7f1d3c44e52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3914 Malicious code in react-mount-point-unstable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a12f68daa4bc6ad2efd656ef3b93ae79f1783de0c3591c171aab5b331b1be2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3919 Malicious code in solara-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d11917059b5c9bae62b045f1b86da3912936d28e6568bc30ec686779c22da807 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in hardhat-configure

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3823 Malicious code in ctalking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b0bd0f0689ac862a7c01e77498ff68470544cf1aa43dc3b59172ac04896d10b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3851 Malicious code in pcln-popver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 206369b24afc9df430dc47b2d41276f40aefa542db8d9edc65179445e8cb99be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3831 Malicious code in helvetia-base-patterns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3682a1cff47d9425b9d7c8d820704387f078a2f5ee4dadc955da09c859c23579 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in safe-react-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in openidconnect.net (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25c68fdbe733e629344de7da078e67668a22362f0be388e127a2d2b603dabd43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...