Malware in seagroup-assets-management-system

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in codm-onlinematch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5f6fb5867fd54709c01f55a61e5186d80049d7aca83fcfe7b52f4ae562c4af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in codm-onlinematch

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3871 Malicious code in app-bff-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 655a2f4df6d902859d804242c3a98e97bd5bcb325bc1583b5c549d376234d219 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3873 Malicious code in arcnagacha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a3dd2e7d9a6e46241619d32ad08253b979773786a3bbec2e3116240d51a7898 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3876 Malicious code in codm-lucky-shop-pss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94fa7b770ddfee08869eed0cd92c1d8ab71d6c0d3a2c52f2cd4b7688f76a84f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3877 Malicious code in codm-onlinematch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5f6fb5867fd54709c01f55a61e5186d80049d7aca83fcfe7b52f4ae562c4af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3889 Malicious code in flipper-plugin-preferences (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72ed77743cfbbcc3b9082b68fd1ebbfc81e78c93b7b73d1045b70adae1785b8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3925 Malicious code in vue-gop-authenticate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5f8092f5dd68ba9b719ca6f042e84c396704214bdaff421ce3f8b933fa7e302 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3928 Malicious code in xero_ruby_oauth2_app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df775937f934e6eee2161d71e8e61cc59dab858b11abd32721c7bb957ab91ee1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in linemtxworkloadui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3921 Malicious code in ts-db-indicator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9556592a185a149af4a877ac348199cd0c69faf0fed158075c976b00585f8a3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in beautiful-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 366a123a150cfa4f12f17cdb337ca0d39a1b8c22e7d861302e8632619e51bf4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3882 Malicious code in dotenv-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 503db890e3fc82d35cc6de9ca072e67dd6c86e450fa82780fdac9dba5db59167 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in solhint-plugin-chainlink-solidity

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in lrc20-js-sdk

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in internallib_v625 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1942504b21b62677ca1a746463bfce2153d3915179537f0621e9b1adc4851b9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3897 Malicious code in internallib_v370 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c10422740b7cbb39e0369e25a7deefc65842295a36c5fb7c6d10182737b2df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3898 Malicious code in internallib_v625 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1942504b21b62677ca1a746463bfce2153d3915179537f0621e9b1adc4851b9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npm-scrapper-faris (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ff29440d7ea5c240dc8376e18b662318b42eee0fdcdf7aa00c931bb46371416 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...