MAL-2025-2141 Malicious code in webauthn-codelab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1db4dcddcb204fd78a848e02724ef26a5bac5da98f78246a3a90084b790868b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-getting-started (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d1a9dd75e598f2d340d19584d29b85df620c3b44cad4c5cc94f0fb18cfd056a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nncd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 728bd0a35f02971fda5e94d1102c6c85d388f47e770cee0da8f92e987cce94db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sample-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce665e88f829ec81fed84869682431912fd05dda0ed950a4a37db218cc2c6673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2121 Malicious code in pkl-lang.org (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e62ea2ef542d2e8dda998bfe58ca7673af23732af531365aeb706076f9ea9fd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2107 Malicious code in hh-sol-artifact-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e98f2e66755e1bb1030d04fdd4f0bcd8693e045ede73b18d61ff0b84f6c0daa5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2721059d3c235150be73e56a8ee8116350dc5833b7ddfd198691407d6b8d834b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pages14.0.0_i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaed3f8870b4796bd4fc8667ec8911ddba466acaed945970ce6cf2f67e2630a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1689 Malicious code in @f2p-mml-frontends/mml-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ede0cf36fe3863ea31a447c95853a9a95a8b926d51476470fdcbc2bedfeb2b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2022 Malicious code in @dealfront/df-dictionaries (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 005f6dc68da6691a10ef5aad4e7b77f4e8cdcbbe7aa892786754c834aba4f46a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2057 Malicious code in wefweg32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76caa25fdf514fc948cac0ea90e6ea22c814d04b780776b48478a94c0141230c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2054 Malicious code in tg-shell-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38c69457497c0691d6d8e9fd41c25a9a61cbddbabee9cd66faa2d7ddc05045b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2055 Malicious code in tg-shell-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 183483dd192b9daec2a5d81eda2a6c1b448091a4cfe626150636d2f1be19fd7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v488 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f37f04bf2b99a1dd9d1b1233d8d2f7146da088e20564fc4bb543560acebb10db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1868 Malicious code in internallib_v590 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec78d3b6f3c622365e71936c4fd09e3057a62055d7b0474ce38ea3b6560b36e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npm-manifest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ade7d6d1c64c23c0b5ce1641cbe6a421ae5e995127affe277b05a6328ef012e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in segment-anything-mini-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb8c3372e17b2d5c656e3413a8226ae4df29679ad9dd48131d608a31a2e4bc93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2047 Malicious code in paypal-sdk-server-side-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7cbb479a86e79945f77f69a5ee3fa04d2ed76af23ea3bc9de04b02ed5cc0b4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2050 Malicious code in segment-anything-mini-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb8c3372e17b2d5c656e3413a8226ae4df29679ad9dd48131d608a31a2e4bc93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2052 Malicious code in staked-celo-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67d1427804f29e64b173dba49a127547304fc5e45b01496a6fccf04f0759236c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...