MAL-2025-4358 Malicious code in hermes-inspector-msggen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c888d12bd2fd1107fe758f38e0e220f18fe717c6524edc4edc0478727a63bf6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seamless-sppmy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0389a6eb1c890ee2de52f64fe14cf1cea2bf0a952bfabdde2686784ddaece9ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dof-ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d1182a5fa877ae1d59bba4f4eef2ccb27c53c2549f97c27aa6da6ef9ee4701c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4403 Malicious code in sfc-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1666178bc834e0e4ff1cf9d99b642c7dfd6d9d279154ad62cd32762c7797e037 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4301 Malicious code in arcademinigame (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fa9222e0b3e443ffd36e1adeccd80b245382145f0ebdad7b8caf37bdac61b0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4359 Malicious code in hideoutpd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05755ffa640417a2738dc322d54a0dd1ddfca66b9b14d26132c60783ba4822b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4401 Malicious code in seatalk-rn-leave-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6b9f25c23e2b93d7cc848ce9ac2aefaa73aee0ef2467191ce24bc4c3d5d797f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in hideoutpd

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in datamart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 585164112e040e876d8f0d759498f9e01a70eb003e68fcad9832949a0289ce10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4376 Malicious code in mshop2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b230b23967aac14c732f470e9bfd9d34d27bf592c1e3ca7150e827ef17cf5e91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4409 Malicious code in tenslots (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9f95166f5aa514f66ff9b0b93e38854038d01c0b74644b9e64aae7b2af17218 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4404 Malicious code in sps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57efa39f87821ab7b20f816cc7f9581c2e826b864eb91162d8098419b5e4a39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in url-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8a74e201fe0f57bea3516ddf0b2117217189749e17a77ef5219bf7df33abe79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4322 Malicious code in com.unity.ml-agents (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfceda90642153626d064813e4c0c601ca81d18a6c5fd9e96855cbdee511db13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4293 Malicious code in @demoability/loadgen-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77bc624f36bdc284db27e9759ccf30fab22108a753042ccbd6a575fc26f90b79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in com.unity.cloud.common

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @elementor-editor-github-actions/utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in com.unity.render-pipelines.universal-config

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @demoability/loadgen-core

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in vite-tsconsole-log

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...