Trojaned AI Tool Leads to Disney Hack

This is a sad story of someone who downloaded a Trojaned AI tool that resulted in hackers taking over his computer and, ultimately, costing him his job...

Malicious code in testaaa11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee9af0a167a9449542aeee6148dd5d89d3f9e387e437198cb1a5a3b99e074fd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2089 Malicious code in amis-widget77777 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d942d0ef0acfd81130cbd80a7296143bb7e3fd2bd08430bdaeefddea85c72c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2137 Malicious code in v1ue-custom-widget-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f7e56b04ae3ca44fba371adba340a3933b9fb3e7899bc2da0a2c868373970b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2092 Malicious code in aws-ui-component-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dccf55adacf1d8f07bd95ddca3f474ac9b53ffa48455ff2cbb23352bd0055add Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2077 Malicious code in @fcss/ui-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7badd1358c73b5aebf13b4734aa71ebd55fd281b1a1a05a7f60e7890e6254741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2085 Malicious code in al-schematics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa23abde2f15732ece6a95eca8e1692816abedb8fe470840b8d8fd6c1121f18d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2075 Malicious code in @airtel-lego/sentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e126e868d890d40f42157c798a5f6385a6b2cadb73c9a125606b59c79057cfdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2147 Malicious code in wishorn-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edcd28fc157b75a41f751a4a1dfcd5833123ac7521650d990f96858ab11462ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wishorn-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edcd28fc157b75a41f751a4a1dfcd5833123ac7521650d990f96858ab11462ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2086 Malicious code in amazon-codewhisperer-jupyterlab-ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a4e17673b58fae37b25deaea3bf55c6fdb9a69285dde321917e6e775d7cdf57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2097 Malicious code in blackhoole (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 053be340ed4870f8e3c020233081738483eb3cc49f35efc12152b49e931cfd18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blackhoole (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 053be340ed4870f8e3c020233081738483eb3cc49f35efc12152b49e931cfd18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2131 Malicious code in toloka-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c7326d0e79737f24ac6ba12b7f58459b7aa76c833af0bffc5791d2ef4f1a1ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2076 Malicious code in @cdplinetest/user-account-spec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4413f7fdb56d00b76c80100b70ffb2b67150c303dbce426b298acddc1dad026e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2083 Malicious code in @ton-wallet/create (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d32db786acddb2de3383780a06c377b94cbe49ae5c8ddb811d5f9175bc0c9dbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2108 Malicious code in kitchensink-ui-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57dd46442eabdf4fcd3affcfd4b7ef777c2229b46845426429e6277a99fe8f9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2081 Malicious code in @roku-web-ui/legacy-styleguide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64351a60460f32a078a6792ac73191925335220106d05dc9d59eb22c56281b3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2132 Malicious code in upbit-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ab0bc431ed17927a77a584a2314cd38d812d215c32611c53c673137340dbcf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2095 Malicious code in bitget-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb95beffc6efb8662038329634e713d9210de5390298fe4811ebec827a9e2848 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...