MAL-2025-2706 Malicious code in sf-intl-sn-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb4cc33212e001bc0af0440f49eb0c52cdc0ad223eba555c5cb2afaa9931e5c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2637 Malicious code in @sensort/router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fbaa1095630e7dacad6c76d024d3ea54744e245053790df146c0524358fa9b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2662 Malicious code in create-sensort-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da1473448f21d07682398de668daf47a21453a0c884d94a67902afec6616de29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2636 Malicious code in @sensort/mongoose-migrations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d546ccd4e110a5e2cdd36b9823cddd0fc873607ff587abfa2761ce711a5896bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @sensort/core

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in elm-lang-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c82a505ffba5199b772a4cba7d59e99f33bf645f034a148ed9b248d308c49b82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2696 Malicious code in ofjaaah-dependency-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69d28e1655217e54d687a03a3c6b7d2f1bf2e5098277d42ab0072f39885269bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2681 Malicious code in justinmimbs-elm-date-extra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11af7440e5eacd7d966f3a8948c08a28c29eff3b39493714c76c2deec71592cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @ofjaaah/jose2

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-2629 Malicious code in @mint-lib/routing-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97df96fcfd4afed289291f55c411b10293b85a52d658e3f35b74cc4969fc30df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2627 Malicious code in @mint-lib/notifications (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6287de558e6cd52611d12e02b9997dbbb24d52578b129047832bea6483393830 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pn-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6788e4d94901987d6b643edd5ac4d70be5b436465250b943c7d9793895d061c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discourse-web3auth-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22290c7662af2d58b4706977dcf0e780e9aa9f028a6d15d75e47831ab96362f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bootstrap_dev_scratch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40332b73ea061eb436ac01a90cf6ea7447f7117047d2ea136f6f91a97da86426 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2716 Malicious code in vistar-ad-clienttestadv3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 998a79c7a6246c56acd40382f70e1cfab273a5002ff94a5242bb0bb12b8dc962 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2711 Malicious code in standard-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28c17ceaf11f4d1d42e7dc07cb7ff6aa720f72bace56df5ec29fa3ac3368a514 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2684 Malicious code in maga-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7324ae340bc742957fa3933df85f2f8d4ce90fad2c5a4f7e97b2685a1acf5f6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2682 Malicious code in kagi_browser_ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d43b7fd2a47594e2b75e6634bd546cec8f3fb5d8c20181ce0f6ed15e368a91bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in generate_genesis_values (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04696576e4143f9336947fb36650924f201a9a6c56b495e5c05c80ef25713275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mathjax-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5b3b67677f9fc901fefa32f5a65afd65ac6a199d7ebb72be98b9ace3dbbad19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...