MAL-2025-1410 Malicious code in digifinex-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8438299c54e02e8c5d68152a85e81e6c2107adc6f80aa7c61ace3229748f2093 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1418 Malicious code in hashkey-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cbfb5981f5a265535e71887c445c0c6ecb4ed47efec5a57b4fc30dd22edb527 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1455 Malicious code in yizhifabao61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4890e322299c10cf22318660890a8ac411e680b618a7bd30761c5016243379c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1451 Malicious code in yizhifabao57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22ed25670f60b7bf4ad59a8c2f32ffb29212cca6f5791f1471051f8ed8b60def Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1443 Malicious code in telegram-bot-hoster3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a657b92399440588fd143dbe4c319d27882350d825a29877b96676add635391e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1382 Malicious code in vidio-kmm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e504408eb9deb6119908874c0e0d1a2ed179bfe908a21a8f42d8296ede12dbc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1381 Malicious code in ts-plugin-file-path-support (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a29c99a3decf55fe58b9d10ce858b903ae55f7d999f98549a8416b4c12352e65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pmmmwh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61153050710afa63f182defea4220d45b2a3d6a8aaf0c059d892d9deee856b6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in panter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbc6c727a85e3a6b39102a212df195cab15c8cd0dd944070d41039ecb7b37455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1365 Malicious code in heytap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd65315913bd79c6221ae968a448d85b4188a3d48da3178a5d88c034eddc5c80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in assisted-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13d61cf3fd29a340ba0644006a1644be59bc8a39769b41c2586665e3c21120ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1379 Malicious code in telegramclient-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 544758d4b45ebd5665b1bb9b068290cad56fe4f586df9ae5491321a32733dd26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1370 Malicious code in openbet-player-api-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11f880dc4e1451453507ea3db6a2cf42a292a1e81dfd3df5bed7a77d00bb84a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1261 Malicious code in trufflevscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf08d3952be6248181a39013b0923365cf27f422f56a1e3ca9addb9d8099e452 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1263 Malicious code in zkpay-plonky2-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca4c0b192b94b3273cd949b9abe540803dab23bf3c1acc0d6b5405efae321f4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1246 Malicious code in growthbook-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c737e188f198e2f774debc152e35106477be618741ecc8afc62df2b72b9d0323 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1250 Malicious code in internallib_v666 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9638a514e7e2d6283a828ccb3fb9513c6ff53de16da5291b024f5465fff3c788 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1258 Malicious code in react-scripts-win (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29e804e3b477f180aba3ed9674d889a1e235e2091cca2fd2fe31cd5ef7528978 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in k6-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7cb564097694bf695333aae5e27e5a57cf646842369831d93bfad2391e9309 Any computer that has this package installed or running should be considered...

Malicious code in pages-proxy (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e215918f5cc85a894233afe08ebb076c28300732fbfd5f8be0aab954b5e455bb Any computer that has this package installed or running should be considered...