Malicious code in private-callout-queue (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7962ea070e8c6d0dc03b62736d3b83c52ac2367d2f5949252c86fa295aac63b2 Any computer that has this package installed or running should be considered...

Malicious code in graphorbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e39cb6a782c7394e47a516577dd7696fc2db73d710cdd07e5ceec3dbc46c7af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48326 Malicious code in internallib_v190 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75787b9471cecb41a09915fbec6bf00bf40073c0f2da3ad342ee9fb1c83a366c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48343 Malicious code in scr-file-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e14437e272ed4d4e6bb48ac4f6b3e3cce3f5838363b09ec1e6e95400dd5812d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48318 Malicious code in nodelog-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c3f1413a6184e042f68d9e0cee79523ea3c0566535bb56e1e0b13370875fd8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48273 Malicious code in buyingflow-core-nav-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94b6cc0a729e266013937adc920cee3c7c57f6c4ef99bb5d08cc79e3e0ee9163 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-10.2.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edbba59677096ba6cb6e726feac84ffde07fbf44a251eaafd0502902b914b5f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48254 Malicious code in mad-2.0.2.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a417a96fb1a489ed21a97883097356cc05d7f014eee21d941bc0cf6a4541c036 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3j-io-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adbbd3bde158787db574505a858f13ea34575b68e5b097210afebd82fd57aa73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48157 Malicious code in redirect-ewce43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d3a83cfe9df44f0743b065c4c13d3e28fb674fdd00d29200036c53697af96ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48206 Malicious code in redirect-q84l3v (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2989dd266ef12e7bf2fcbde54fc67c8d6722320a84938aa5bed053b1259da8da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48174 Malicious code in redirect-j5blfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 053b01b4d218e109dc50a8ad0aa7fae9620964eac01e9ff6e495f6bf2056540e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-icp3vd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f43ce8e85b926ae6c1233766723a657d9565be6422a63383c2b73b15a3c9525d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48143 Malicious code in redirect-ch5ayp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd5a7889bc409c2784ea3f069b4bff00c13364fc20515f0b46302aac192d52c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48103 Malicious code in @testcarrot/supply8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62090c615c296faaa4c5b5daeca903ff5f30ce22e263e583ed7b697159fb17dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48048 Malicious code in redirect-7vw41m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e2ff7b41b210d052c6bf0d4bbf06bacc41931093d686c3b97bd56cc2034c860 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-4iyfat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 308da4bae6f06eca09a47a9ffea24c1ed5afd9ce25ccb18c266d797c1f29e360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48047 Malicious code in redirect-7bqfg6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cbe30cd65f2e9549fac6967014eb87d8c906c7a0801f82dab1d1de706c0e606 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47998 Malicious code in mapbox-gl-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d036b317c8c49cc8982dedb6417e57b1669e9dfc07159bf4a7e6fb136ff939c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in qweqweqwexxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eb4579b71df57bf70c32bdf8375874927db8256e0dbeb573b748d12439bbe26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...