Malware in @raydium-utils-v5/fetch-wallet-balance

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in eslint-plugin-consumerweb

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @wf-ceo/utilities

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47964 Malicious code in rechaartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4076a91965c506fe9fe4a66a26cae408db851c4179a73e15e3dfd470627b5aaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orvllaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3584ab328dd8996e4d1e1746cfa59a920d22e771c85deee2eea112829de20ff0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47948 Malicious code in orvllaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c14485f093ca8dc9ed7f8edb235eac174df0118b3960643c3c0c8ddc8d2bf7aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47947 Malicious code in orvlla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56ea7ddcdbe3dab6e4c993804c781fc7cc5d3b48ffc11fea15a0adbee62d9296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47942 Malicious code in solarpeng_node_eval (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d1e85f15a5e94e61b12759aeb924685d04a4755d7de2f57df2a81ba1c8cd549 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in graphflux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81407cede8c4a0a29787867b0a52b7947864a775ff7efbe05ce00785ea6160a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in dragon0905-vite-tsconfig-assistant

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @dotevn/config

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in kecacapp

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47921 Malicious code in @winstan/vinston (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 701c8532f7235adb3a68d19af65d9a7b583be566885ae32b443bb5789e58ec84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48084 Malicious code in vn-hrm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7e7500ba0af4e9b2c0354a3820e7c28cc50ed3e9092db9e4c3c3cba3958234 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47881 Malicious code in coder-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39c2ddf9a60ebc68bffd364ac4fda53541ff6d6967a0fc5344e4d082f207aa27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in com.unity.2d.spriteshape

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47889 Malicious code in mccabe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb690e83db7bf325ed12d03f46975f5de59a5b5756e9ce05cf5072e95cb5852c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in pkgutil-resolve-name

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in cryptonote-util

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in com.unity.device-simulator.devices

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...