MAL-2025-4660 Malicious code in verylinh-sky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7a2f858becbec37d67893dd85db5e5b64fdc82bb1ff3d81c07e18868c059f86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4648 Malicious code in node-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 843fe1d3338e398ebc485508d20455b921ed8e3cbfcd3fd1140d4aae32d34109 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in viryy-nexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83da7b12f8cd7a828569d2936d55759bc96ad48760ba8ea0124dcf612721e671 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in node-prettier

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4651 Malicious code in parabol-action (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d82468091c3a867fd7981eef0555f14edc29822f932782c0fac1bf9e67a15d7e Any computer that has this package installed or running should be considered...

MAL-2025-4627 Malicious code in log-trap-catch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dc12c22fb18702b22d35fa127f4f43058dc50f65393e6bbb1d666b48bb7d905 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yaml-mcp-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63f698f000e6c4702e971dcd3923f64bd9039710fde38e7329b170ba0266ac01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4632 Malicious code in rose-web3-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e7bba39177d14d11698b3ccaeca36599df068894146efc99d0ded173449d9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4626 Malicious code in cx-hub-interaction-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17ef553f1f7cb91bd70d99d55deeb1c83c604b68581cbbfaac1f9bddfbdbe6e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4614 Malicious code in rosetta-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 223577bf445eef54d28cca3d3d2015b497b5c23838c938f2a48411440b05f614 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4612 Malicious code in react-native-google-acm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3987a453bfe3f7164232221b3a1a0f9c3c182a6581cf7a9241f4fbb7e77af649 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4598 Malicious code in motion-exts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 601e06f31b115364fdcbdd0d794fb32ea363fdf0fcd281f3ce7f332b6337b8d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in process-load

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in muto-kaiju-npm

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4603 Malicious code in safe-query-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11febcd6756020266de031e6231af5b64b843075b41d5a57eee5646f44978a19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in nuget-trends

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in rest-icon-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1df42e0b9f4ff541c485fd5c4bb6ebabd85ce2a7aec08ffd4a6234650332ac9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4535 Malicious code in wallet-connector-rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da34a4136664074d4841726a150a99a3bc33e88c131fc32766950633e0f9558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in wallet-connector-rce

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4529 Malicious code in jwt-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e6fefcdc9ad0aef91f34767bdce289240d2c62fe34698883f251d54360dc69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...