Malicious code in winstons-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7ebc9796eae3ab4eb7380710ff205e061c750965207974c71dba9f0d8d2ae8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iokit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0809d84edd6d3d9ba71ac05151f2564c41a8d94a6e8ee6b57d8237de7ba7720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in expo-firestore-upload

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in apache-iotdb

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in web3-evm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47f8566107060326567a6d66ac66f3c457f9a24142c7c3694200e07af63e9e27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4441 Malicious code in ml-preprocessing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 449fa18004b9f5016f86ea6f5c97358b4ca5263d4649325b946379ca51610f63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4444 Malicious code in mxc-klinecharts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c79272f6f70f9c9bb5fd7c93c139322148f3fe12787d784e9e7e8530dc002134 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4436 Malicious code in fe-second-party-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bcbac1a3c8c63cd47005ab85c88ef2933e702844df4a607f5f54157c0a2881b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4437 Malicious code in hibernate-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ba5c88bd8432cb5249a0abdf018e4b4c5da5068923a451703ae35d409b16414 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @mkto/analytics-provider

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in vite-plugin-esm-import-extension

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4431 Malicious code in catalog-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b8c5db0f6aa2b0836f3971d1e9520ad4895f5c5678b97abb13f89b103a19e3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in vega-embed-v5

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4425 Malicious code in blocks-nextjs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ae607db145f1ae39e7375c25cd19509f7f82eb76be82e74ff5cc37650ef27ba Any computer that has this package installed or running should be considered...

MAL-2025-4543 Malicious code in @ing-web-es/application (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7692fb7f2c8d0720f92ab88567ebb27c12e7cbcd9e735c8aa3676782f17268de Any computer that has this package installed or running should be considered...

MAL-2025-4544 Malicious code in @mc-donate/donateweb (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9325722a4b74dc591b6e7655a9bd06db9dff5b54b68de22c24fd2b38d03743ae Any computer that has this package installed or running should be considered...

MAL-2025-4393 Malicious code in react-stitches (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6aadb4042b3d0276837870bb016b686e41ca410df61fda4ecf6d6886a1a296a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in koishi-plugin-pinhaofa

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4346 Malicious code in feature-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97f8b69bc45a74bab5c69310a0fa0c0cd724a8d2cb1372feef78a963a76619c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in eslint-config-airbnb-compat

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...