Malicious code in custom-tg-bot-plan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10cef01d344d07be2f72b365cb97f994a5cea38eef145b5b25de21f1784cd740 The package custom-tg-bot-plan was found to contain malicious code. Source: ghsa-malware...

Malicious code in dizcordjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 679877c4e96760ae7dbd53d81c46c410bb32a9465f3288f9db08b21a127e17c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49082 Malicious code in dizcordjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 679877c4e96760ae7dbd53d81c46c410bb32a9465f3288f9db08b21a127e17c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethesjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea9c413600cb75bea29c7e567157efcaa07b76b9efbb30cb378943bd81eb760e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-login-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fcdb01161dd908ab60a75665ae19aceaa087fe291da7b8be7c5a7eb44b00011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49037 Malicious code in react-naming-convention (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f1de3b293c216a9b6c48e3cdb120f41ef3a161e4aaa7be1aa115440108c0f4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @aio-commerce-sdk/config-typedoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7115c3c8e9d8049f239251eeaf99504698b6eea04f36d5490dedff17b173f77b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49030 Malicious code in polyfill-regenerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7d3f5ade208f63787145ecad7643a32b6bf4525494a136967abcd7d0ba2e720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48993 Malicious code in durablefunctionsmonitor-vscodeext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0bcd6dd0f47781eb145c4a57e94a505ad8fe070437e096926c7c5a7601087b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49063 Malicious code in ul-inline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15d6bb031b2303d28ce8296da9c8f534d9576044e57faffcf455a70b24aa6b9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48995 Malicious code in elemefe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcbb1237331b1e8b0d21101d938aba8142d3d16132e181b92f0a2d91b389e90d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ucbuzz-web-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822537afdb770182527cdfc92395d4fcc57ab88a98e6958ba68f93eb84f119ef The package ucbuzz-web-common was found to contain malicious code. Source: ghsa-malware...

Malicious code in no-floating-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06870b1f839041e943ec19a9c8930d03b27e9fdfef7f3b79fe0eff1545dec2ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49024 Malicious code in named-asset-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41aa2c9de0b9bf1fc5a9cbee9d0442255a36d349e4645660908d01b2ac8db820 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-ipack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04968f8d37cfe2848c6e84c9c09a994da049651043da1015e31963470062395a The package react-ipack was found to contain malicious code. Source: ghsa-malware 3411c0f05536a691b48437d34b83198f786eb7a2d19d27a5c4555ac397d5a927 An...

Malicious code in jito-shred-propo-excutor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b4ebf0c5d4498b8403c0b3ab1ee9f79b34ba24238d22b2bc8b2b32efd2239a The package jito-shred-propo-excutor was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48935 Malicious code in shopify-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974d73b54aa22ffaf8dfee7094b175bea558642ea43dda60cee5bc58b44ed17f The package shopify-ruby was found to contain malicious code. Source: ghsa-malware a529d693e0fe4a67a348d26b2117b4b314994f3378fa0ed92576c915cd5dccff A...

Malicious code in deployments-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ba6d5d2de9ef4fd28b80daa2474015f2574ae70d3ccb9ea5c41c73c2f846bda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ggtech2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 402a2de5aff6b47fccb36fb23db1070eee17b8a098c87b256108ee8c7d793021 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-utilx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab60af52b9e400a2e1c3d1ded16c4d31065881c813437a8951595cc83e9a3e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...