Malicious code in postcss-theme-vars (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f769581a5253a548235fa611543497af016d8733ffe11c1f0967ed8e185791e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postcss-layout-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 462502060afb8b130fe73ec2cf8940f9cc7e7d86e3a70ad48606a6b1b4484231 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-logify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e65a157421ab735107ae923596b8ab46c598935d30810b1e0ccf879388850ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metaplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56094c5aa47c7f90dabdf4a647d1fb79534f42102ce0ea011b8fb4bc0aa398a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ripe-grs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a9dcae56aa553fbd3ac26d68ec192342012f6cdf9d82443a1cc08f76d037c1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zora-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5434c40d3048f846ef1d268e25b386ee6000460a939ff2aa2d91dd67ea1e897d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zora-hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c7a760130bed2c2193278fce02d4a9955e74cc6644076d142f28e4cf8f85514 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uiframebox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab2c616a224cb417f60cd79d4602b85a358e0d787a50cf44ad48b4be6d7a59f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e7caa25c734e04724db6b49ecc13404bf34c539b99cef0c60d7bd3125f17b4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mediawave/lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5728f228ecbe0dfd5db6afd530842107e9356201123b885d36418429c37ffbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-coreo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1167ba130b5705599b06b2fbc88a331c7b50940fd3228204637781cc9b6df0a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-purify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 967c29ab4727c0c9222adf576904d3609dabb81458899c34c58b578e5437cc53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4831 Malicious code in google-auth-httplib2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e57c6a4e7ad5efe49fa44cffce46a4872792f3f1225d726be0b6a6c3d5ed156 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nethereum-helper-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1113e69bfa84d519a1db8e7d38e9f66170f41d55f60398de2f057c298838d76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in espresso-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8ce5ab7d96b084c2116afda967b080d56ed7a0dad48fe8ac7b67a1317824e8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in system-health-sync-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13c337e149bd36fcd54891e550bf7fdb7c1dc36b1bfc1b06e0b1427851d4adde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rose-bsc-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0422833afa24ea6306580169f0075085ebb17b4758e03c3a49fa55b9420e3d2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-svgr-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d55ebd57427c5d4a72a5d0b5c933540ce481fba40f3633f37618562ef4c8554e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skinnyvans-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78bb320c57a11fc61b5db53653bf51fb93b078e579dcfae939e15a6749c139aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mockup-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04a4444bb887c9ab495f7e74745ace094fd3cacea41640e572bd4a9bf68009a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...