Malicious code in typescript-aurelia-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f456bd00aefe5bb2b77b87defb41f72c059fe860d67b0fd0dfdfc98baebb11a Any computer that has this package installed or running should be considered...

MAL-2025-4955 Malicious code in typescript-aurelia-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f456bd00aefe5bb2b77b87defb41f72c059fe860d67b0fd0dfdfc98baebb11a Any computer that has this package installed or running should be considered...

Malicious code in mw-remote (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deb98a28a6d1cc05645c39a41adf2da3f193d98223ed6239c39e5bed50d1ebbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4986 Malicious code in mw-remote (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deb98a28a6d1cc05645c39a41adf2da3f193d98223ed6239c39e5bed50d1ebbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4954 Malicious code in plugin-proposal-private-methods (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c0bb5e1a8b40dd1e99594481c6671cd4b01e1864b590ece14a07e6b241af7bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in requests-json-overview-pkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0086e01d67b35f7c81bc1dd5ed909ade2520cf967356bfd3b4849d1372952a6a Any computer that has this package installed or running should be considered...

MAL-2025-4949 Malicious code in ls-onboarding-frontend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db473564b7a21b15dbe15dd67ba5ff1551000c7cef010286303eaeb5ecebfc68 Any computer that has this package installed or running should be considered...

Malicious code in zora-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5434c40d3048f846ef1d268e25b386ee6000460a939ff2aa2d91dd67ea1e897d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zora-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2764c900ca7254d541cb02d4393365a610648e80866768703dcae298b4f3a4b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-49192

The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives. This could potentially reveal confidential information or allow others to take control of...

Malicious code in solanautil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a994a5a77cea13db3655b647260e91eb43eaf01123269218c0378fdd8d94db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4942 Malicious code in solanautil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a994a5a77cea13db3655b647260e91eb43eaf01123269218c0378fdd8d94db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in husky-es (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7389701dece7abfcef40d0bfff8c26f78ce0a68100f40bff5e834bf57d6e637 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4938 Malicious code in husky-es (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7389701dece7abfcef40d0bfff8c26f78ce0a68100f40bff5e834bf57d6e637 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4939 Malicious code in iclpacket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0efc8dce0d882fab2fa310c21c96d189d1a393b72739e5bec75eb77019e1eb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4921 Malicious code in frontend-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84270f7cb41eec813ccd947f1510d8849dc7ec317990d0be20450a14a28d69e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5032 Malicious code in error-ux-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476bc83dcd99575742060ce7a3f129b15a4da89c0605ae7b4eb57e4cef54bf8b Any computer that has this package installed or running should be considered...

Malicious code in supersccan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 681626695cb78322698dfe68cde7981a4b53ae9a23307f738f4908589c8ef2bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4927 Malicious code in ods-core-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c864e00fb5ed04b7160b6804c91bddefa43500c877ad9e889fdc397f89c35721 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4924 Malicious code in ac-shared-instance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25b7af9d106463b8924808d5fee450cebfb97597573f764e76939e297a483174 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...