MAL-2025-2703 Malicious code in requestz-promises (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f6eab2fca0656f140282d442e79f3edae4b6879f6e798147e1fe56f9aa34eda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2702 Malicious code in requests-promises (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f69e675db1c52596e208921e91e76489607213dc7f4f3c5ce9f9a824b02778e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mindbody-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e37ef0ad0fe9988ddbdaac4f3d9be1ad02f040ef04bd54fd5ffeb9ff266d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2689 Malicious code in mindbody-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e37ef0ad0fe9988ddbdaac4f3d9be1ad02f040ef04bd54fd5ffeb9ff266d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2669 Malicious code in erp.srm.common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aefe5aebf241305b56cc8d9dfa7db5b5ac822991c482e9e6e0890d6475e2240c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in vue-official-web

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-2685 Malicious code in magpie-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4776d07e83074f4b9eb4c3b26583b7a99bc123558f5d6154e653ac27c5506017 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2718 Malicious code in vue-official-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54297a016228c62dcc04040f8aaf8e680d35a868040c66105b3418e472d4fd67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2706 Malicious code in sf-intl-sn-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb4cc33212e001bc0af0440f49eb0c52cdc0ad223eba555c5cb2afaa9931e5c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2637 Malicious code in @sensort/router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fbaa1095630e7dacad6c76d024d3ea54744e245053790df146c0524358fa9b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @sensort/core

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-2636 Malicious code in @sensort/mongoose-migrations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d546ccd4e110a5e2cdd36b9823cddd0fc873607ff587abfa2761ce711a5896bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elm-lang-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c82a505ffba5199b772a4cba7d59e99f33bf645f034a148ed9b248d308c49b82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @ofjaaah/jose2

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-2629 Malicious code in @mint-lib/routing-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97df96fcfd4afed289291f55c411b10293b85a52d658e3f35b74cc4969fc30df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bootstrap_dev_scratch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40332b73ea061eb436ac01a90cf6ea7447f7117047d2ea136f6f91a97da86426 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2716 Malicious code in vistar-ad-clienttestadv3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 998a79c7a6246c56acd40382f70e1cfab273a5002ff94a5242bb0bb12b8dc962 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2711 Malicious code in standard-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28c17ceaf11f4d1d42e7dc07cb7ff6aa720f72bace56df5ec29fa3ac3368a514 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2684 Malicious code in maga-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7324ae340bc742957fa3933df85f2f8d4ce90fad2c5a4f7e97b2685a1acf5f6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in generate_genesis_values (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04696576e4143f9336947fb36650924f201a9a6c56b495e5c05c80ef25713275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...