MAL-2025-2235 Malicious code in @supera/asjnakwndlja (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe6ab5a3ff2b2c90cfb7b31837f77cab7b08963f47908e8f5f34e9280b20fe2e Any computer that has this package install...

Malicious code in jetpack-e2e-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe798df756e79d2deb6db29c4675b6e0255d8d3607198c924e2ecb4a485b671f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1487 Malicious code in jquery-real (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b8ff49544d48bbc5cdd24a029e34388a93fed21433a09e77f5f27dfe19cc1b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1498 Malicious code in simulateur-de-don (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85261d939101bd6262ac504db7d7c42ee93a444ba9a1ae423a8ba1eab7d56bca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1481 Malicious code in gas-oracler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dcca7c831b2e569f7852c9cacf2c86f95466a0a62c77729ada4b88ace35430d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1496 Malicious code in sally-fn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d8f992872ff1926200839cd344c09dfc137f063e5f7e5f87f54d62b1d758202 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1491 Malicious code in norequest-akash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 510b9a55bb5d3edb3f9ec11a61f72939b8f5b05e64d976cb49b378118bb12e1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in byted-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf324dae7bb985ac37aa0fff183e7f60d94c61c8b95b73049e79fcb49a52c27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unmoderated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70f2bf868d2780e6b4d8a00b1e6f3c4385994e32d71be80b2efd5d4636bbc0da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1503 Malicious code in unmoderated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70f2bf868d2780e6b4d8a00b1e6f3c4385994e32d71be80b2efd5d4636bbc0da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tesdf45454t (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bab99ac2b3599508ec9355c7499892e486ae8d8d433fa04e1da03449d7e0993 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in suvauxlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5b9068f18c537a559453b7350d3d2a6fc61ea7a7988f11236ee6909550a41b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1419 Malicious code in htx-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7af8cfe522f6a03c75b9bf02f62bb022b2930607b810b33a905d16a26d2991c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pionex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 140b5ef89db32e0c5bc1f860989081e6cdb3bcc488bafdb1b3e7e78ee78d29dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1436 Malicious code in pionex-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 920e3da8486469505238abd948067c96de94fbd869e6732782e06809f4fd7902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1445 Malicious code in toobit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f762603da623d8fe137db26b48c17bb54cead19699d368690d433f939e45316f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1404 Malicious code in coinw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5897dae91f48c018b6b600ef276fe1c7943d5eb4af335574454aa802bf60250d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fameex-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ece0843f740857fdad2cfb35504bc5e5b9451ad659196f3ebc5153b648555a71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1415 Malicious code in fameex-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 956f7f7dd723546811c75dba7b1b262c4134f53f4ac86ae38350fcb67fa542eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in p2pb2b-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f3406bc1d90365600ac04cb2cc6fcfc8ff98c4d9050b2bc5fa598c3bb3c7da4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...