MAL-2025-1200 Malicious code in worldcoin-grants-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f434639d184713c5d345b9503077d108e6700344719b5e4825d684743661e01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pkl.tmbundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b085480587244717534ecdcf4280b1dc0ed096c05f17455017033b4c0b5f3be7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metamask-sdk-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 563827ad840866efcd9358d913c0a4e28044e336ac6d4ebc9a33c631afd70ed4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in update_image_asset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23a245eb7d761ba61f0ab7db2cc504abb690a09fb1fe2b995535390a48facab3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cs-templates-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7eab2131a229bf433f5924ee12b5bd1e1e393c31b3027c28aecb5a187057d23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jetpack-boost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ad5f27610bc7b64b84881ad2ba89f0c7dbe4a43f19215848e62d70dc54616fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mpl-token-metadata (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e20c7d93bbedc5a446405747356b754aec260f1716a86efbef222f15a52385e Any computer that has this package installed or running should be considered...

Malicious code in addon-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c577c976c628e28178068560e5d64a099c595fddbdc191ec9343ac7ee6149712 Any computer that has this package installed or running should be considered...

Malicious code in ebay-testera (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a95e1aeacada624e5f153ca2acb4c9b2d9af86c15c07bfa726da3d2b18cab7b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in design-preview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffc37b5b24f991c9971b396f89d6033730450e10bb121b33c1bbe183d4a636a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-278 Malicious code in calypso-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b98eff47a4acde03f525440e1a5b4a46bb09d9766422550e449954a95d3cb607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calypso-eslint-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e56d5029c9f673038593248e7a19047892f45f4344d5a98af273acf9d2a358 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-249 Malicious code in storytel.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eac8a26871ff9acbc3aae4118bf1e4716b305b8547d5fcd1f650c7fd5580b745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in podium-pride (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5abcc917b2c3c387cbb0096d57ec3b264785aa5e13f0fd89e57133b7c30c820c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lib-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fe973aa7a191c3af7d728aa84fd8833989b5b4fa4cbb18ffff5595f890fa540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ie8-dom-define (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bafd820b50caefd5e1af4ca12fcd7861408751d2ebe06de855897f04480f13c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pyroscope-oss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78530d6378099081103c13a5d340a9c8562d2c041085a8c20893adb93bdd115d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylexjs-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b0810f5fe9534bb182c28c449a4ad5dc498cdb96461e00596f5b6933f2b67b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in efergvthdaadgfhrgewsfqwf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 894602cb30d010a59a8a636fbe8301d38272737acaab1eac0ccd85996644fe8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in controller-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34e748f33e1982598d357d378cb8b42a4361f9a056afdd2c66b16586e034fe41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...