Malicious code in web3-trade (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8535d63f8ed51333fab465ed5f1b0997affed89872dea1d6d384a25c17112caa Any computer that has this package installed or running should be considered...

Malicious code in new-items-card-component (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cffcddd91732bfca058bc61ed267aa0a24f1e71e7fcd830cf9060d8e63cd57fe Any computer that has this package installed or running should be considered...

Malicious code in shader-examples (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be893a664956943dd2d7acfe083a05148592f7ce7adb2991f68fd577391651ab Any computer that has this package installed or running should be considered...

Malicious code in custom-query-parse-serialization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b54841d5b21c1f37a53ed8c5230cf6d43e948115b0116890c9bc53a963e08dae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deep-links-movie-tutorial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34a840de253ee6e7e6e03231c495a2d90bdaf338bf107fba5ed290ed21136e8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ib-ai-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 547c2e4af2cd8eed422db2ccf1d7975144a2418c9663d76dff5e00b13e447347 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1116 Malicious code in etched-oracle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97df8d30fd81167c60450b61facff2cbe4d9b6d83d9092fd901c55c632026968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1151 Malicious code in moonpay-websdk-buy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385edbb240f2ac3d9a5e81e74c03777fa5ae2609b83e2661407f3840312b1f72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1122 Malicious code in fastlane_paypal_video_project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbac686e7f68e9b8765ef6dfde034e191e47cb639a2ccc0e2535e8ef61c522e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in git-scm.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93eb12d3d84e8c6651a80e2b684ba3fc83cf832f1fd9efe296c4cbfd3618c331 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blocto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e997c352502b7ddd39617ab41ede149ae5674ddff4126238e28dc662da73d24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1187 Malicious code in twitter-cldr-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6922d34a8a37d6986abdb98a1e9cfebc0151ed16d0b43cb410e9872171a62a79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in worker-template-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06ee62f6404cbc2ab384a294313e49c9685b3f7a3251a4c9b86dd1d8e90dfb05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in action-npm-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 048a0cf0cca0b18a85e69e831d1c26f1bec7888c3f5e1865bd185b3470fb9e2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in worldcoin-grants-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f434639d184713c5d345b9503077d108e6700344719b5e4825d684743661e01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1156 Malicious code in node-terminal-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c7a95bb17689730a0610fcb7b778624d3e4ca1062cf249a15afb2e5b9aa5084 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-standard-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45bb803ebb8e266ab790d8a7ab7ad62d31675c7ed376f7a50bb88c0110816fb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1148 Malicious code in metamask-sdk-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 563827ad840866efcd9358d913c0a4e28044e336ac6d4ebc9a33c631afd70ed4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in combine_assets_store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa4e8f55b1bba97340610f1c4d32d8d9f895f7a296684818056f2e994d2e7a69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in packeage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b50411a0f653d34ae98d6d973a1c004d7fa8f67f71b7b6f07b34ed5288af404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...