MAL-2025-48300 Malicious code in lovable-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bdd25899ff870aeb3b0ade0eb3b9d360a82f3a71dd4dd872e8f3dc4019ce982 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48298 Malicious code in matrix-charts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec928e940d4a9d80d7e512630b842c44283854acb9421a3ecb97c288f07fb7a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48271 Malicious code in advertising-charts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e0d648b7b4026cddfac170e95dee7ace2e607be7c21ce885f7ac237135e3478 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48241 Malicious code in bird-clean-sky-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d4690255e702b2e0003068c76afd1666551d9e315ff93105a769b6250d46469 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-icp3vd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f43ce8e85b926ae6c1233766723a657d9565be6422a63383c2b73b15a3c9525d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-j0rs4a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa8ebbe3a98e48894b9cfffa97f0333cf86c69c8a576131d18032d4bc0ea3767 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48207 Malicious code in redirect-qbzqro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33232292b94991718f7dc9e3044578cf9cff875e62f2025617495095a2b6ee30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-cn040w (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25a017e32cbceb0365c659a0fc3f0649a71d0b52774c3d8002bcc808baa4d086 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48138 Malicious code in redirect-9iak88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b98d46b56f1f5943ab4986d31e6ce7664eebd84d3a0f8e731f4bb9fd267ecd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48010 Malicious code in unitest2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aed7fa383be13086f76d33ea8cf0fb7262464155423ce6c74e8f46c1bf69f6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48002 Malicious code in poolcake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bb8f867e9caffbce415671d637f82bc49a3097df8d2cb5c3a41e464419a91e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47532 Malicious code in @sev-ui-verse/contact-models (npm)

The package @sev-ui-verse/contact-models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eafe3e022be23739d479cdfe1e577a7e5b593a528063ce67b8fa1beb911fb2e0 Any computer that has this package installed or running should be considere...

Malicious code in x402_monorepo (npm)

The package x402monorepo was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 289e2c6110a91f2ee16f7a0beed85851e59612748773355b6bb90a5b7073ad16 Any computer that has this package installed or running should be considered fully...

MAL-2025-47533 Malicious code in @sev-ui-verse/core-models (npm)

The package @sev-ui-verse/core-models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 794fcad76f90e38dc1872c555e02d03512701d4d3a3ffc2a932ce9421fa1de97 Any computer that has this package installed or running should be considered...

MAL-2025-47543 Malicious code in @sev-ui-verse/providers (npm)

The package @sev-ui-verse/providers was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27efd3b5904168e110748f7dc2e817324614b5711aae935b5bfacdafe8364830 Any computer that has this package installed or running should be considered ful...

MAL-2025-47506 Malicious code in tsleep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed66f2b93e98b57d021fd0653e70765b4b209fdcd11df8fc84d9ef9081c32b97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in luma-glow-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80813446edf951ac165d71e8e56c30d45881e40776615d07d104e3e40ef1f5ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in working_tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49c21a63c0a80ed6817e5b19617e29f869d463d77843ef462ec7f9f177abe0aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47145 Malicious code in @huobi-lib/vulcan-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19abe7ab9afcd189bbbd5061add8629d1f576b8dae3944cc7974b7581ffbd570 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47047 Malicious code in @self-sell/store (npm)

The package @self-sell/store was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a25554db33ac217aa1afe6e461f5ec9429746b8c3071523cbea2987e8cdc04e Any computer that has this package installed or running should be considered fully...