MAL-2025-2143 Malicious code in whitebit-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b30295d1f08a2d3f1e6d3b2fe1ac51157020a84c2ff55356ef468d7b2db7e4ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-2-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b4594c9bb4674f2a9f165fc30fb2a0a4422504c322e19dae701700c87444fcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2125 Malicious code in safe-backend-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07c4d0b3565522f959a93610e46a8e5765c7405621afd4e3ef3856dc77cf4cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2114 Malicious code in link-outside-nest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60138fd924427918d630cea0c05320160d12aa498336cbb87a174ee5eb2231db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2116 Malicious code in morpho-blue-irm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28a07a377a39de069e4f8f9c05264041b94d825875b2f62cafd13decb74e43f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2121 Malicious code in pkl-lang.org (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e62ea2ef542d2e8dda998bfe58ca7673af23732af531365aeb706076f9ea9fd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2107 Malicious code in hh-sol-artifact-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e98f2e66755e1bb1030d04fdd4f0bcd8693e045ede73b18d61ff0b84f6c0daa5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.github-glitchenzo.nugetforunit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2641b4718102c38479e074fc167269436aadb2ff01a5b703a1c5e0a02fa09d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-getting-started (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d1a9dd75e598f2d340d19584d29b85df620c3b44cad4c5cc94f0fb18cfd056a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nncd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 728bd0a35f02971fda5e94d1102c6c85d388f47e770cee0da8f92e987cce94db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in organizer-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71911a8ea9e577cc58952aaad429e86a8c29e91145fc92156b41365c77f19012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sample-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce665e88f829ec81fed84869682431912fd05dda0ed950a4a37db218cc2c6673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2101 Malicious code in com.unity.2d.animation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc9471b1667f7a99781cd6eb6b2981af2cb2d997202877c74068e9c501e52019 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2141 Malicious code in webauthn-codelab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1db4dcddcb204fd78a848e02724ef26a5bac5da98f78246a3a90084b790868b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2721059d3c235150be73e56a8ee8116350dc5833b7ddfd198691407d6b8d834b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pages14.0.0_i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaed3f8870b4796bd4fc8667ec8911ddba466acaed945970ce6cf2f67e2630a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1689 Malicious code in @f2p-mml-frontends/mml-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ede0cf36fe3863ea31a447c95853a9a95a8b926d51476470fdcbc2bedfeb2b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2057 Malicious code in wefweg32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76caa25fdf514fc948cac0ea90e6ea22c814d04b780776b48478a94c0141230c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2022 Malicious code in @dealfront/df-dictionaries (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 005f6dc68da6691a10ef5aad4e7b77f4e8cdcbbe7aa892786754c834aba4f46a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2054 Malicious code in tg-shell-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38c69457497c0691d6d8e9fd41c25a9a61cbddbabee9cd66faa2d7ddc05045b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...