MAL-2025-4062 Malicious code in biggy-deezer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd10df9c64d337296146770abec6dffd39f38b2ef00323b91816164b3e24f9a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in keypair-utilsee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2a2d11e5c7234bf618c7909f22af17e0fd3787ec6e461114dfaca49fd2ef108 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4066 Malicious code in chains.web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 162ab39d32e8af255dcaad40e29e294e4849e4c76273631024ddb7cc9a4398c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4081 Malicious code in ggeiekkepbwedvcmerki (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 856bfd7871613286d5d690f7b4c1159ac3e40956702f7e17b4ab760454a0793d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4124 Malicious code in scarce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a05097c7c77bf6e33475e2e38daf131934703a7c79c56548eb012316c01e7e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4107 Malicious code in neodium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22e6859d3022b758670d5c459846ac12039cacc27e7895501ba5544e3e3ecdb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4077 Malicious code in envjsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4aa332a40264890a2b2256972f5b88920d7bf693b89832d9b3b5e17561a5db8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4134 Malicious code in string-multiutils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 440e4d338ee90f664978d7d33507ebfecbcf30ef88faa1e5cb3d3e7d5cfbe12c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4080 Malicious code in gatsby-mars-pet-parent-journey--server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70efb29ad6f2b4da2940934e2b50c20f30c3798c9a7a20da6affc3479f343133 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ducksthegoatedone/ducks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07996ce8fcdd695995919d84cd1d62b1a127fab349bef9399e413b78c2ba1fab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in loveisalie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef78377655d4f0dfbe08aad228013333938835f85db86aa38fe28b21748339e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4101 Malicious code in loveisbad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36fa8a1e12bbc84c5893bd3d80363dcb95e903bdfec8cfbe652082141fdad6d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4059 Malicious code in @shimosre/fingerprintjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5ec9df2b09da9a3ea38a7df8c519df584e89f9589852834fb9736c899943936 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in company-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd5015b0393c3e2981f574bba469382525576dba01b38627ab06d4244bf497d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4070 Malicious code in company-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd5015b0393c3e2981f574bba469382525576dba01b38627ab06d4244bf497d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4122 Malicious code in rpc-selffbottt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3c07eac1a0d04e26728125d74f3c6943fc7234cd4412cb6daf896b3abfcfef0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4140 Malicious code in web3automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d672942f080fffda85d73f5bea601c52d4d3dda65fbac48e825eaf371defa25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4142 Malicious code in web3walletconnect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6379b5bb35b541783545d3399d145213c35e8db9351a2ba95b8ef457db094e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4118 Malicious code in rpc-selfbot-v10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac2e07d59eef832d8c3e404342ed24b2b1e0c1e99b6f2807d004c5ae6e85ee84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4126 Malicious code in selfbot-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c00971d4d896820617ba1bb41eb75f5236353cf89f9c1498f5749044edd566 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...