Malware in calendar-card-component

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in nemo-dast-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38ea0189209023ae2d04586bfbc3d791022f0fa6052dee65ec03832a80ce67a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3071 Malicious code in mahesh.dojo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c8bce47a87fb6050b1d2865e5c616c2b3deaaed0cd8b0346e0ede24ecd94371 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3059 Malicious code in @nationalgeographicsociety/ngsui-core-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c79788b32fb541eecf3d0b0268cd2e201328ab9caf252358c1f9106c193acf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3026 Malicious code in yass_eal_abcdef_ssdsf_dsfsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9708c11d4bdfb0c8887d90f2cd1def69498544a363191b5f3ca7b3bbeff52b88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2746 Malicious code in agentbse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbc1a3323e35cbce1ddc24ab20a734247f6aaa56a638b8a7eb30c49b18e4278f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in shipmentdetails-paypal

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in mocha-dast-reporter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in militaty-geza-blessed2025hondo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-2782 Malicious code in resolver-options (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68b3b87faef2aa88da0714f9641eef9b258d050775eb10ec9fac90abbae5d8b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in events-utils-lib

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @takamol/qiwa-library

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-2745 Malicious code in @takamol/react-qiwa-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 793f690e0bffdd7f7b94c843db756d422d1d76e710507c5f07fec74703d68b55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2772 Malicious code in macappstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0467c582858f86d97b65e2ac8bcbe719cd97323136272b766d45045822a7baab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in osxlocation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 070d31af50179f9a0b4cbd8dc75d3bb1e6b873b3b0dee8490eb4d252e5179f45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-hectorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f6f7f9a7ef4ddc982849df1b0144158db3f60bef6633d7797c6f25a18cc2ec2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in consolidate-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab51d3f2f1f669e9f16db54bd9c1699dcc1dfa4e1f6c8f9b6dfa0174b331f3e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2658 Malicious code in cln-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56b9cc716f2f19131b4daf97b6c72c4b58b5b71d337760dc41188971098e4fb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2712 Malicious code in telescopetest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa29b9ba0d788e8dc9516cc458ab02e3fce22faccc63522b0f1a6caf439ffb14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2641 Malicious code in adhgsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05e093421e9ca505a8ddf2a74f5ce1ed881d420d53a42d487cd9c418af34cdcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...