MAL-2025-314 Malicious code in tour-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44bfdd42ccd9f1335cf7f7b07ba399341a0a93af1c683563cf6a63697518f580 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-300 Malicious code in plans-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04b1c05ad3cb73c09f30ded556f336a88920f11ce91cba56ad301b3dd88ffd21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wp-babel-makepot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d331165ce76baeaab9aa529ff1ad7c5ee9ce1f76032d4ea0db72ca744a2a0f76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-316 Malicious code in ui-components-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5ebed80f557fd2e81a446cf38988b615c07e4459d17b289756a2646e2b8fd54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-271 Malicious code in aem-spa-page-model-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f616d81322d87ec1a782a237c4b35c53512cc3e470b9fddd65db49c0c14d1425 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-269 Malicious code in aem-react-editable-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fdeb2ad3adadbbe85aa33bbaa3ed1728c9019c415d8c1e218db5f1f72661482 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-282 Malicious code in calypso-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30b449bf6f8392b5520e508efa7924fc5e7561b8df1c6dda4e09db65693f2bc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-268 Malicious code in aem-angular-editable-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fca4a582054bbff21e69768e3b5934e358df88c79f61073e65cf4272a8510544 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prem-instagram (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7546364925ac5bc237fd230e46a4710450fb09b9c34f98c5d8fe0f969dd358c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prem-babu-media (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccac29381b3bd14c6e4cb018f0bda417c6f15625becf906f6f965cf776b89570 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prem-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ede831b4b52c9df6bee9007afd5ecbf303a958640eb1ceb9fa7f2144992d3098 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-237 Malicious code in scrumretro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 322bb93a5561d27c4a0ae6e7b7615cc7a14dc59abd5d4426bf0ca07b5c71c181 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-218 Malicious code in plib-ai-chat-response (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bb6968faa9c60fde77ecfd7899ac822b379eb1a2e677efb8b2cffb55c94c95f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-255 Malicious code in vimium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44509dfaad88d7d41ce9ddaab892cf01041d180c4338febe1840b887a9edab1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in okta-help (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3702e75fbf633b5ad6e1b0dd9aa6eea3283728f7bd3ba1d7bf9109750dab2df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-173 Malicious code in com.unity.assetbundlebrowser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cc638fbdda6e9a85e316d397fa90e5d3306ab3c17a078ce28307258664d6586 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in braze-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5e81df6fadd36a9f51f5daab0483c919db2c42225a2e96eb0bf40c01be8eb16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-172 Malicious code in circuit-breaking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5cf235621502095fd69d2ae553b60a9ca2ce7f5f211b74ee581139e36a6b0dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-196 Malicious code in is-array-iter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 610756b24c2e5c73a74bf0ea57334df54d8147da9f324a9eac74586b381e08bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-235 Malicious code in pyroscope-oss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78530d6378099081103c13a5d340a9c8562d2c041085a8c20893adb93bdd115d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...