MAL-2025-3215 Malicious code in @csds-web-components/csds-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dc035502fe2552360c01c2157ffadef0e94f13981a392ac55b634cac666e4d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3212 Malicious code in glog-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 971dcb9a7fdae650e637fc12c4045cf4c7e8cac575b4d6f6c18d93ba115e5f70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @talentai/carbon-addons-talent-ai

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3203 Malicious code in vite-plugin-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cffc6b2ef3ee7169eb637677097e46e1f9c980cd6fd606d1b521830c2a8cc92b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unreal-engine-material-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb5416560cfa4f934e2b9541b688b91c11edd2c04d167c8859641e58697d88ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3198 Malicious code in sharp-heic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6db9ffb0551887208262a5445e00bde6f964551601c407e01dfd493ef1b144e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3194 Malicious code in neo4j-apoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446dfffd9d2f4e171ae7e9e3d88c997b8c9c9437d3f9c6b47174ad17ac40a651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mongoose-to-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a3150653858c1f5fd60f8f54afa7d40ae107c6dbc5e01b1ead3c021fe39e0a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in mongoose-to-json

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3188 Malicious code in healenium-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3021a2416af8ccab79a0fcd8c2e6357b5a7a4b7965ed9edc8c4be0997b7e363 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3189 Malicious code in healenium-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 789d69d0ca569bcae290e9b2b348366d669711d7cfefb0d5927e4bdc6e1f84e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in solana-candles-oracle-example

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in mtw-capacitor-usb-hid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4323a3f80bc8e5ceadb75f1584e0dc478b1a9ed7980736609421a432bd35f50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3167 Malicious code in xnil-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3080465273f9e03487710425237b11d198e0659208bd5ea0c2c561d43ce54590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in sasha-web3-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in arnotest

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in pdfgenie

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3159 Malicious code in nusign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5abb5aed02d3e6ddea2218e353719dd67a4a00bdc801c4347a7ed49f8f08a1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3165 Malicious code in shiroisthebest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e179d4c7188e5eef682908b39cf158311b927536dbae3793020d6d668fb834e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in legacy-actuator-support (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36c556dbf86cb7f6c937329b814614f149810c3959d22139e4f53b29edee481 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...