MAL-2025-4276 Malicious code in debugdogs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41181b869f2a857e454633ce56a380dccb2eec0f82c1e0c7186d85c28932ac38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in node-telegram-util

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4170 Malicious code in cryptopay-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcedc265cd35c85d1f001fe8dc2c4da5d52e5a4b473c125b7883a67e797ff4f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4275 Malicious code in axios.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0143e37fa113bdd2975f3ecf0863ee32758e2dd808a19e611b51c0bacb4a8f03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4290 Malicious code in vue-vibe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab8de1f63578f65874a6d949bddf997d76bf6e1c2a0fcfae34f696368003df5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4132 Malicious code in solsniperbyagave (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22d6ef63513cb6ba90c7d26166b050ff064c8ca07745dff68400cd9f0bf3b112 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4095 Malicious code in lol-lux-shopping-mall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a990aae5e086e13c87464c79e52ba48732a675a67318f2a84bd502b2f3b2d1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4071 Malicious code in core_plugin_b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b017d4d66c75e5abd747ac42ebec3611c23c459b9d627c55156dffafb700258a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4085 Malicious code in grammy-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 046e10436e92cd50c0763ffdd2a43218350ff80df64ef5543de01bbfbf8c5544 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in grammy-sdk

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in raydium-sdks

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4084 Malicious code in grammy-telegram-bot-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f9cf91971b8da8348bf38f6f6b21351467c1d6e8eb00c76fdfbd4c52ab6f389 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4114 Malicious code in raydium-cpmm-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ce1aeff6f99c8c97def067abb89997e877fccd2ee6717b2d87516e0402cf08b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4112 Malicious code in pumpswap-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f6871522b8b5eebb3eca021b1ead1d42bf21998277934139af4406375de5558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in biggy-deezer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd10df9c64d337296146770abec6dffd39f38b2ef00323b91816164b3e24f9a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in keypair-utilsee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2a2d11e5c7234bf618c7909f22af17e0fd3787ec6e461114dfaca49fd2ef108 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4066 Malicious code in chains.web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 162ab39d32e8af255dcaad40e29e294e4849e4c76273631024ddb7cc9a4398c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4081 Malicious code in ggeiekkepbwedvcmerki (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 856bfd7871613286d5d690f7b4c1159ac3e40956702f7e17b4ab760454a0793d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4107 Malicious code in neodium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22e6859d3022b758670d5c459846ac12039cacc27e7895501ba5544e3e3ecdb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4124 Malicious code in scarce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a05097c7c77bf6e33475e2e38daf131934703a7c79c56548eb012316c01e7e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...