MAL-2025-2094 Malicious code in bitget-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c98dc8a8cb993a1e93d89d0909e8243bfd607c7a635f098ee3b3c103101cbcbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in upbit-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ab0bc431ed17927a77a584a2314cd38d812d215c32611c53c673137340dbcf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1789 Malicious code in editions-dev-2k-variants (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in opensource.razorpay.dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24d0cff23cd279c7679ff230e73f2030f97701dd01f54be53b182dbcf72e7dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1395 Malicious code in bitstamp-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75d9c1b781dd9fd2cd794a0a246a84f54527c4d3c8c6ddd6ef84686d2214a560 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kcex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e06568c4c0cda180b68708e215ae0015dfc43a00abab40785f838241244c0989 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1420 Malicious code in kcex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e06568c4c0cda180b68708e215ae0015dfc43a00abab40785f838241244c0989 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in weex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3463fb43413f5f55fea549cc0240a5b8e3726099081d9d9379f10c772591d870 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coinw-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f2a295fd0929cc6a57de7c7f506b1bea6f9c586967b38e3429554a2d8094590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in p2pb2b-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59f7063c9fcff0127b36c127dedd6b0a9f5ea43bc5ae8534adea55a756413730 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in digifinex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19cfa1ecb29ae8496e8984153bdd6e045fc0cdc8ac994e67678201fd125220a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1347 Malicious code in deepcoin-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b109e03066101d06f96d699de95cc7de90f7fe2489c1728622e18d5b39de8d54 Any computer that has this package install...

MAL-2025-1324 Malicious code in bitmart-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69812f8747387682581f0dd9ddbb41055fe07020e94fcbeb5b3f8ca68f745a11 Any computer that has this package install...

Malicious code in lbank-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1b61fe26cc73bf769451dd12b10b59aa2b2b0569b4d3c9d813b94c2d6f355d4 Any computer that has this package install...

MAL-2025-1305 Malicious code in gate-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dc14e82a56806231e6081224934a67ef7c9498e2bdf40b67bf26319e05fb536 Any computer that has this package install...

Malicious code in bitfinex-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 547671d00c8ab0f008f2d79e1722fff17fcf8abe2751e126d426249a9f62eb0e Any computer that has this package install...

MAL-2025-1301 Malicious code in mexc-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29d69b3c891155b693e55fbc8734237edcf681cab20168d998375ea5ebdf2de5 Any computer that has this package install...

Malicious code in mexc-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29d69b3c891155b693e55fbc8734237edcf681cab20168d998375ea5ebdf2de5 Any computer that has this package install...

Malicious code in kucoin-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bc6d7a1ad2130468f00ff8d87225df98b3ed6bf45ca9bfb1a4abc0cb86895b3 Any computer that has this package install...

MAL-2025-1290 Malicious code in kraken-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 538966bb30335d489eb80b6dad1c7b14ec9a71669fded6c77d31dcb84c13f3d0 Any computer that has this package install...