MAL-2025-3639 Malicious code in opentk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95ef6d6289289b15bc63ba83dcc85e309d320ff643aeef688fa5b9a31701e2bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dayjs-plugin-duration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d6c09f6f8900e2be647537f5342bb545a0ee4b4affee0e47006cc43da3d489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arduinounit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3000b1e04d46002942a2a037a04aa4bd574ab2125bff52806c0f518f728e7ea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3643 Malicious code in sails-mssql-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9aa02c92e690ce82873d15a2bd8dab23940ca37b05b8dd851f223d17d91c923 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3609 Malicious code in apache-httpclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a77347ebb8573c5fbeca35230df16ec582c33958e0a5bad13704efdea35f24eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3657 Malicious code in wdio-healenium-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f69202ef10fb1de6b44e69a626d1d52c6871dd969a2e7d39b28a05b9224eeb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3653 Malicious code in vite-plugin-node-modules-polyfills (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba225e7480a310032d62d6de3db636b57a0bb3e2594bf99605df20b09352eab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3622 Malicious code in haml-jst-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0d8ca2db3fdc34877d4cbc9c4b109a713c2d744251b47b95621df2db46fc5fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3651 Malicious code in use-videos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 235a97287f989e663a85f1ec29b96d80b5450762113cbd52a39972e47876539c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3658 Malicious code in windows-api-codec-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92245ebaf3540c628e01a2ec1741659ca0285f765539581481af03e857d4d31f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3646 Malicious code in sharpgl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f22ba4ed7e734343cc53e6004cb9372862b8ef668d80686aac2b4bd1d05682b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3975 Malicious code in zas-design-system (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d20414d39d4095c5c4d966da09a2977c17ae6b568e3649ddde859f58f334821f Any computer that has this package installed or running should be considered...

MAL-2025-3927 Malicious code in world-id-discord (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c2aa40d0cfe3dd971a7de35ba8d570a70d3b34f516dd5d69eff3bd7309bf96 Any computer that has this package installed or running should be considered...

MAL-2025-3904 Malicious code in lrc20-js-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c80ed84544322e91ea371449b18229734f12afd46bd03c7f7a5a04947ce64ba7 Any computer that has this package installed or running should be considered...

Malicious code in wegenenverkeer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 208aef56bca72858ba42a6a6f8e100ba7b9cbf696d45876b6797afb8b6d6ac27 Any computer that has this package installed or running should be considered...

Malicious code in gql-test-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc1a4e0775ef3923d488773c12cfaaa56a985b4f914af402f9598ea0d564b883 Any computer that has this package installed or running should be considered...

MAL-2025-3606 Malicious code in adobe-commerce-magento (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd6d37a2366d35f3960bd44382c3af4b61fa4ef998f6983dc7cd8bbe7dab3f78 Any computer that has this package installed or running should be considered...

MAL-2025-3608 Malicious code in amazon-seller-central (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c024eede57523427c4d17065ff707dcc6b11ff31346b6be86a4103202e377ca1 Any computer that has this package installed or running should be considered...

MAL-2025-3607 Malicious code in adp-workforce-now (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e4444262a0b552b47dba55c3ae16e66e9a1f3030328828f03021f255491b31f Any computer that has this package installed or running should be considered...

MAL-2025-3662 Malicious code in @gfgtech/ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84be24a70b7b194bd9b506eb47c9e8b14d609c4dacff0fe05c46440b18ebcc58 Any computer that has this package installed or running should be considered...