Malicious code in sqltools-kusto-driver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b4f7793f8ffb915758717bd05607ceb0b5f0d1525a564240e518e4191985f95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5778 Malicious code in grafana-polystat-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16c78bb4eab009d5ca0b36e692021c2f9d402df7bef90eb6642dee10f8e69095 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5779 Malicious code in grafana-zabbix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0191ee6e16af65a4978ff84c89cc7d2849df8ea05a88a9462c05d4d000e5c66a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5789 Malicious code in nmig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6e6f1ec1132797f243edb4d2c3283331fbc9e71087b281dac1b1bd42dbb9a52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in k6-studio-ui-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in sdk.babelhelpers

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5748 Malicious code in @nomicsfoundation/web3-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8be3c236328576fc8bb353a6101fbbf35e483b67f019623f8d2f7538898b568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @nomicsfoundation/sdk-test1

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @nomicsfoundation/hardhat-config

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @nomicsfoundation/sdk-test

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5749 Malicious code in homiersla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18b688a5a2d22b21d1e643d311c8364a0d6d26d28c537c6e4fbf1a00f7dc12ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in oneapi-environment-configurator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in oneapi-analysis-configurator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in grafana-iot-twinmaker-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7f0ee041fd32ff1222732d276760eea9a8547107ad0492a0654088ddfb85381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in zigbee2mqtt.io

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in mulle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15589f9b2ebb828fe096efdaeef76974f774119ab4db373e4d9d5735399909f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5683 Malicious code in css-keylogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d7d5c0eac76577da5186e985efd72018e773d9ada891e44852188b9e5cd8632 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in create-app-attachment-github-action

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in react-router-scroll-navar

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5716 Malicious code in phone-mockup-react-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f6a1418f459219963b15e9792b3f8721f33e7d7f3bf802a570652c6f3a5faad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...