MAL-2025-5580 Malicious code in rpc-selfbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b1911508710ad71ac01a6d39ebf112ea34136d68fe9c8631c647eb52e009b31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontend-building_blocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28828db7648dd2c99bf1bbda884e9f12b8f0a60ac0068a6c12e5ed0ce79cb651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5587 Malicious code in twilio-webchat-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ab5419528c85b4b675bfd8bd45c7d107e151b10606f24a8ef7c9b9192dd6f14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wp-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bd25807808ab0722baeb487925a65428a1198b9ff17c596ae5c3a7ec1d05161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5585 Malicious code in taskrouter-event-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6bba47f8505eeeef34953080b36ace84d8fd303c36ee00977a2d00f9447a4eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5582 Malicious code in servula (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8505d9630f35be52fc05427d2e1cbc9e0fe1ec0de764803117447e8b0b8d265e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5581 Malicious code in score-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddfca851a951dcfa02da040d550eff2bc8d72f8dc443582d195d066d32f9dbf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5558 Malicious code in frontend-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27904d02d7b34509febe4e37adfc1393b899a8d8657ce860cd8920549eca3f5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5549 Malicious code in display-node_utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 533971a15c86f5802466fd66868bd4b146ad0752358ce8b34a62761612f38630 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5579 Malicious code in rgl-transitions-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ee572182c10b596368b86b76ad1cfdd1caa58a5fc9309b10259c1d373732fcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5555 Malicious code in fneves-my-test-poc2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19f8dc54c675177ab89e24f43db5f53227047e13b1433ee635e7b54b4dd64e43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5346 Malicious code in ember-routing-htmlbars (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7464e55323e08fc50ba6b76ff3b04330666a207e832b601326e41eddd22625c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5345 Malicious code in github-datasource (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2771dacd93c395c86cb08e3778a5f1003eb477b0338d318b052586d73a90eaae Any computer that has this package installed or running should be considered...

MAL-2025-5342 Malicious code in videoel (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8021df1be7bd0e0fd9525b7be97565c05a05946d7c57fd4f234c89ce1b5de853 Any computer that has this package installed or running should be considered...

MAL-2025-5344 Malicious code in sdk.babeltest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb7d26e89ca8ffdb305da3c7bdc066c71640e5a2f046f9172acf6308b4864c9b Any computer that has this package installed or running should be considered...

MAL-2025-5350 Malicious code in @paysafe-consumer/authentication (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2388dc2e56b582bfdd2495ad1e116a98d1e0aef671877287030751da40e1857b Any computer that has this package installed or running should be considered...

MAL-2025-5376 Malicious code in category_textured_background (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b79fb63e44acb7b89709ad74956de390dafd2a044dfe4ca90e3759773517a9a Any computer that has this package installed or running should be considered...

MAL-2025-5522 Malicious code in tag-rotator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe07dd4d2b5a47e282c44e56fb8ca54831d4a240a4988279625494f2487c6d9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5337 Malicious code in themeone-animate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e147615a6d4e51665cb5f31f094f28cbb4c79a9c3ea92899c8a0a37ea40bb4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdp-transform-grammar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26ec9a8ad7301b26c32473ba504289ab4b40d221d1de8d91e2d7119ab847b102 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...