MAL-2025-4864 Malicious code in playwright-coverage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf8711293d366c2ab04b98c26ea6e6fbc5022a045727404387dc51c9496cb328 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4863 Malicious code in pipreqs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94775693df8241bc82973cceb421a0a3263d044d7a810c724173c0b4ada361bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4862 Malicious code in opt-einsum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5af28147ec311b3f20c1a63a200d242102077c353766cd3b77c9809bd0af917e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4858 Malicious code in office-addin-debugger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4af71d95c178cd7b60b7f8f5f758ebd7003e5b853b2649a1ad465580d6751f6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4857 Malicious code in node-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d3ceb026e94d925a50747700634d96a0e709e7c3882dac41638f6578a9e7228 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4872 Malicious code in react-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea18e81b4f8dd9695b27d71a047d0e8f2e6c2bb52dcd1b3b3f19cde0391c2fa5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4850 Malicious code in media-recorder-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a0ea0109d577f9df113fa325e2972e99d701b2a51a9453305c09381bd93d902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4847 Malicious code in libxslt1-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01dca888124ebee488c3fdffe46760b8062c7b090ec88b917cf55144e2f46289 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in karma-spec-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3503f8ac76bf4e0ba36fc7cbaab721a6285fe53ff821cd82ca0f4e417308eb49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4837 Malicious code in jasmine-marbers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 824ddfa5506db7a4f4cd6cef8dd72c19faeadaf9e70327d80a01f94a44c123f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4836 Malicious code in import-remotes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e0a548eedf5be8e5880c40fba2c0a01717632b836bb368efcff5e9e4c58988 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gunicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269ac7e0cc85fe2e3078f51d0b39078670681500d705eb403172aead25d9ca18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4828 Malicious code in espresso-idling-resource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 783a8905e5ae890747d02955448c18b9e8ea3bb082a9c12d5eea209a54c33297 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ember-reactive-decorators

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4826 Malicious code in ember-reactive-decorators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d84c1b54fe2e6e15578eaa4b72424dfaea95f68c7a2f8c9107d9d031dd0f8ae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in email-ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4c79355714fdd4b93c7a36e4f249eee1ce00120cb74835c536968d2b6a2e3ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in electron-streams (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91208cc2a76d45e148c93d7469a0c3f62f107923f3f3829a15facb4fb20d0d55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dpts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f18dd94071e8740ce21a5f0aa3abd080e376fc53065d5f7d99b2edb87c46a09e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4823 Malicious code in dpts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f18dd94071e8740ce21a5f0aa3abd080e376fc53065d5f7d99b2edb87c46a09e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csvtool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8d9b3cadfd970dcf2392be22191a804e0b036f926807ed006b53d1542fb4ffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...