MAL-2025-5201 Malicious code in postcss-query-splitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 482056a290c2c7a8615aef0f11b620222670aabd908e5617a0609041849458f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5364 Malicious code in ati-requisites-form (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d64ef4d7097080d38ce75ebf55cf4aea3bdaeecd2d3fef759558b249ac1abce Any computer that has this package installed or running should be considered...

MAL-2025-5203 Malicious code in prior-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c7c6e73e17f87113af9070f3206ac24a1568dbc95820709b46a15a73f4b69dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5210 Malicious code in vscode-webview-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c554272558835d430a639e8f5586c55232eac880a493f0e8228bd4ac5e8d87d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vscode-webview-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c554272558835d430a639e8f5586c55232eac880a493f0e8228bd4ac5e8d87d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5205 Malicious code in rma-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afd3860d2c559adbec7c4b9f7969ba91923264af177c77229e3f4a50e31f9ac7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5198 Malicious code in pfm-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 166c95fcae61b48f203052e0464f5f7ccfe8df81b02fcd4d12440c0dbcc74893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5179 Malicious code in axiom-src (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a03340569d36ca27ecb2ccddc04dd1ee351061a883a2b94494e35b47ffe9f6f3 Any computer that has this package installed or running should be considered...

MAL-2025-5182 Malicious code in libsyncrpc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57f85f0a813f1b8bc1fc6257ceea0ceb472ca32c150c0c77080f6c89cbc230f6 Any computer that has this package installed or running should be considered...

MAL-2025-5186 Malicious code in styleprefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e908c22303869cc7d5722a3021d95376a9dd8052acef7cff8d4ec6454a3edd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5188 Malicious code in web-speed-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a061b921a44e1b6ddb0a7050eb5156679a950673f1fcfa787aa15ada94251219 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5181 Malicious code in internallib_v210 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff8e95541aebca54707b7c8e6f95764f12ec886f6adea6b072aecba1bd5d76cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sentry-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 688bb145ba010593bc53d4870250dfa7bc897a70a613291ed2352ba008314c84 Any computer that has this package installed or running should be considered...

MAL-2025-5253 Malicious code in @cybs-plugins/theme (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dd802e304654b35e34bbfe81914479f85bc1089fc6dd427f76acd10975f5fd9 Any computer that has this package installed or running should be considered...

MAL-2025-5158 Malicious code in eth-auditlog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aec778b05fe218b568dcb73221cdade5489641b92ce59e4baf3a6b50298bee0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5165 Malicious code in js-log-print (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32f7c2522ad9654a06381397d330bacf9a768718488543199f85362870ee4d9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5156 Malicious code in dojo.data.itemfilereadstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5248266d6f2bd26fd740923ccbb40e78dcc1ed93f59dfbaf27e9b51c212f6a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5163 Malicious code in jimu-layouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65e335b07773d41eec063c08f22dfd26f8bbb4ea165ab0080df6f0d105f9e2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5161 Malicious code in jimu-arcgis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7562fe8691e7f400454c23c32acb21241492a486b70e2d5e1cb597251c8e9c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5149 Malicious code in adsk_react_axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a06612c4be43c43a557872482b9686a09f5b16a8d5f9c96611bcfae535406dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...