MAL-2025-4571 Malicious code in muto-kaiju-npm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65ff09fff02691fb8682b4201d712727ea9514f7d2cade6768fd0fe5362ef80e Any computer that has this package installed or running should be considered...

MAL-2025-4481 Malicious code in ideals-services (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 865914eac562424883edf27e6b1aafbe401e4f61f0cf5dcee636e6b3dc0b60b2 Any computer that has this package installed or running should be considered...

MAL-2025-4550 Malicious code in angular-tealium (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0c32462ecdeacbbbfee96fd4f6e31ce41d373f68b0ebb3ec17667e26a9ee66d Any computer that has this package installed or running should be considered...

MAL-2025-4552 Malicious code in ccv-token-manager (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ce8a53c46aaab673372ddfde017c10e1b84cbd5b342474448f9ab5e3a5a37d2 Any computer that has this package installed or running should be considered...

Malicious code in dependency-conftest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aaa3faf1923724759fdae15904fd1769602cd6b493cdffa30ca091cb19fa3a8 Any computer that has this package installed or running should be considered...

MAL-2025-4555 Malicious code in dependency-conftest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aaa3faf1923724759fdae15904fd1769602cd6b493cdffa30ca091cb19fa3a8 Any computer that has this package installed or running should be considered...

MAL-2025-4577 Malicious code in reacts-gh (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f438d6df955eb639b0090cb670175f993ce6f6e5ce1f8d1926d236447864460 Any computer that has this package installed or running should be considered...

MAL-2025-4449 Malicious code in rainbowkit-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83ed1e8adb99f97a9039322cfdd84d79db451f0945c567837f21ecb05d6fc49b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in winstons-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7ebc9796eae3ab4eb7380710ff205e061c750965207974c71dba9f0d8d2ae8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4438 Malicious code in iokit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0809d84edd6d3d9ba71ac05151f2564c41a8d94a6e8ee6b57d8237de7ba7720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iokit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0809d84edd6d3d9ba71ac05151f2564c41a8d94a6e8ee6b57d8237de7ba7720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in expo-firestore-upload

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in apache-iotdb

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in web3-evm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47f8566107060326567a6d66ac66f3c457f9a24142c7c3694200e07af63e9e27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in web3ether

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4434 Malicious code in expo-blob-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a5aeaddd3e10a478c22aad8b7c9c33e937d34c05df63b23d331e509b44028c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4441 Malicious code in ml-preprocessing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 449fa18004b9f5016f86ea6f5c97358b4ca5263d4649325b946379ca51610f63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vnc-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b409d2b1ea3535147d71ddf23425fe3fe4d437ce0d5af96f32f80c094bccc009 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mx-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53bb09097c08dbb2935066fba5cd1b4bb5c50abd404864db6bb6c1119dfdad7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4436 Malicious code in fe-second-party-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bcbac1a3c8c63cd47005ab85c88ef2933e702844df4a607f5f54157c0a2881b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...