MAL-2025-4847 Malicious code in libxslt1-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01dca888124ebee488c3fdffe46760b8062c7b090ec88b917cf55144e2f46289 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in karma-spec-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3503f8ac76bf4e0ba36fc7cbaab721a6285fe53ff821cd82ca0f4e417308eb49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4837 Malicious code in jasmine-marbers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 824ddfa5506db7a4f4cd6cef8dd72c19faeadaf9e70327d80a01f94a44c123f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4836 Malicious code in import-remotes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e0a548eedf5be8e5880c40fba2c0a01717632b836bb368efcff5e9e4c58988 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gunicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269ac7e0cc85fe2e3078f51d0b39078670681500d705eb403172aead25d9ca18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4828 Malicious code in espresso-idling-resource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 783a8905e5ae890747d02955448c18b9e8ea3bb082a9c12d5eea209a54c33297 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4826 Malicious code in ember-reactive-decorators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d84c1b54fe2e6e15578eaa4b72424dfaea95f68c7a2f8c9107d9d031dd0f8ae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ember-reactive-decorators

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in email-ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4c79355714fdd4b93c7a36e4f249eee1ce00120cb74835c536968d2b6a2e3ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in electron-streams (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91208cc2a76d45e148c93d7469a0c3f62f107923f3f3829a15facb4fb20d0d55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dpts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f18dd94071e8740ce21a5f0aa3abd080e376fc53065d5f7d99b2edb87c46a09e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4823 Malicious code in dpts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f18dd94071e8740ce21a5f0aa3abd080e376fc53065d5f7d99b2edb87c46a09e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csvtool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8d9b3cadfd970dcf2392be22191a804e0b036f926807ed006b53d1542fb4ffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4820 Malicious code in commons-fileupload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 176e367d438eb3f5463d593e36cde70f38d1f86a0af240ea8669e0c8a25ed516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4816 Malicious code in boost-iterator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c267aa9b1817904f849e9905ed0a7609d16f046da58d1954f222330503778c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in apple-appstore-server-library

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4726 Malicious code in connectnodewebclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72fc085bcccf174a0e94231d33f82e278941f6a8b7d9fa72f1f83ae85902b993 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4725 Malicious code in frontegg-nuxt-example (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dfeb24eb6c59e883dded7166ce9ff73fb43ab8352fcc2a154f86c7bf96be5e8 Any computer that has this package installed or running should be considered...

Malicious code in flagd-playground (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48e70fd6860510489563cf6789b2fee0dfb75544c1e1dfaef731b0b5df5b34dd Any computer that has this package installed or running should be considered...

Malicious code in third-party-dep-b (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 546b33d818c64cc299bceb8f872816f6fad9fe13aa60434b533d5c4602337511 Any computer that has this package installed or running should be considered...