MAL-2025-4022 Malicious code in shopify-variants (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 064c762261c80ca73923dabe79bfbe291b06b3b62cf25226ae5688463f6d413c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3980 Malicious code in affirmv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37426adb6b2eb639d44506bcc9b739c4ffb2c7b93c57139aa1757972f6cff5a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3984 Malicious code in authvictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cd4d0b8e3e258bdc9b1b6446339e364174fe099ec19bfc42b91d5041f8905dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3976 Malicious code in @cashcowprotocol/keccak-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 169f38ea23bfdcebc0c858d32850cca112ca4aca633aae7914cd4ff6ff6b363d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4014 Malicious code in postcss-optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1b21cb8bf9e07771bf78b04cf38a9b73e69aa559368217b2c01896e9fd46037 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3989 Malicious code in dasjhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90eb199686c875a0d5912d7e7704ac6722aae5e383dfda1a22b0811b82d7015c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3author (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c522da4c7937de32f654a150ca5e926181795d3dfe8936f3ad6c58850e22cc78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4015 Malicious code in reactbootstraps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ffea1afeca97a0980bcef8e1bae971fce5f73b099c0f7c5710f1c08d0293988 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stencil-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63d683888e04619d454cbecb6bbbf03259919fb7cb2a3ac164deb94fd37938d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4027 Malicious code in stencil-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63d683888e04619d454cbecb6bbbf03259919fb7cb2a3ac164deb94fd37938d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3983 Malicious code in arduino-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d38c56c0dc9db93761b7dd740096864d883277825e27bba160aa0734be2c6b30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3990 Malicious code in directx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89c6fdb82cd7b28af322fd42d09eed2c86ab4e1893ca7bd21111555b14057428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4008 Malicious code in kendo-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c625b89207a2538d26f0a63c2df6530e4e8c1cd6ebccacfc59ebee9d74e840a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4025 Malicious code in solana-sniper-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab5b4304f1021114e51758ac79fce358d42496edb340cef7df2d5639efa12a74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4016 Malicious code in rpc-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95a994df6820b169db6c3e6b611d8a56f7a37b91c3af7ad09768225564cffe6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4007 Malicious code in js-lib-const (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02a729f8e6b9c15dea0d5d98728a6fa1585580d7c06587bd998cfb8e8a17760b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4026 Malicious code in soon-night (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f21aa24973e2a2955a44e468cec5fdd0fa2039691cd39122f8c2f468ba28453b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-dev-serverr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a206a0d6714ab34f1c8c8d7893e516f6babb7bb3bb786fa679bde0c300e4815f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4036 Malicious code in vue-dev-serverr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a206a0d6714ab34f1c8c8d7893e516f6babb7bb3bb786fa679bde0c300e4815f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4023 Malicious code in skip-tot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6960890dc5d1f82009184b7fc7b4bded6fdf2a39d1423fd05abfba07bbf58862 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...