MAL-2025-4490 Malicious code in mirror-chat-ctf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05a80d5c1613fb9a0db9f6d2b95f12da296ef2ac3f58be607c601a87c73d840e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-blockchain-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3d5628d888e7c28f26a71142f402b8ad017dacabad04cbf0a71ac4c43223f46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in react-blockchain-checker

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4493 Malicious code in nayan-videos-downloaders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32bc04005274ad27bb9498203c905d728f872255a98f5f19d99ca7d73b354554 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4494 Malicious code in newquest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a849e1ffa2a1ed558e656470b768587636a31790355a8266058e4d9f0edef839 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in telegraf-mysql2-session

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @tribal-worldwide-london/fa-api-service

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in andes-landings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5517e4d951819beeb0f96046d333d0f194e89f07cc61805837ed73e7ef85c77d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4466 Malicious code in athira (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4d51f7cfcb66bad52ffae5a8947bd614f3b6c389266db40b87d4f0b8673dcf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4503 Malicious code in skinnyvans-darwin-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7c46b0e2fd5826ee3bdd4b6d38a695126f358eaa2be3ea79a33dea0667db347 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4468 Malicious code in athira-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9761ce65bffc628fa1ab18f6c7c91bc02aab88a7b9760520d49fb690ab30389 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4491 Malicious code in mockup-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04a4444bb887c9ab495f7e74745ace094fd3cacea41640e572bd4a9bf68009a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4522 Malicious code in wrap-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03a9ed7b659046381b6934ad92828286dcdec2b36fd7cad2a09b4335f51b490c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in setting-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6665b6be13bb69a3fce7cb511bad92a2061f85eaf56bfef87b4ef5a30703637 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4518 Malicious code in vite-plugin-style-svg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a088c782de4d11381b6ebcd1c8b473f9d44157fc43c0e1cf01d289370f67c1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4474 Malicious code in blur-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1679003578817df182a4bac6670c2bf5d42f7fd4189d6ef78bc81206827d1b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4570 Malicious code in muto-kaiju-log (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe0438220e2280d397b8b556e2a7b5adfc978cb14fa47c0dfcb5821108fbc500 Any computer that has this package installed or running should be considered...

MAL-2025-4481 Malicious code in ideals-services (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 865914eac562424883edf27e6b1aafbe401e4f61f0cf5dcee636e6b3dc0b60b2 Any computer that has this package installed or running should be considered...

Malicious code in dependency-conftest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aaa3faf1923724759fdae15904fd1769602cd6b493cdffa30ca091cb19fa3a8 Any computer that has this package installed or running should be considered...

MAL-2025-4555 Malicious code in dependency-conftest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aaa3faf1923724759fdae15904fd1769602cd6b493cdffa30ca091cb19fa3a8 Any computer that has this package installed or running should be considered...