MAL-2025-47004 Malicious code in @js-to-lua/convert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 365d73a741a9c8513dad4db978ffd0658d1d583f07281a9a370a78062f36d6b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47003 Malicious code in @i22/scroll-animation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1297ada7ed50f62fa70a5afda0a5f25b8e52d052e53dc69c23b9927d6024c15f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @js-to-lua/fast-follow-commands (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df9453e1ee97636a2ab1a62d9eed556436a2d9c1cd5a551571468cbe3d4e4d93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47013 Malicious code in arjvg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cd64f189589f89a129472b58fe6cdad30ec47b3cbbefc805f31d335ed8cac98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47019 Malicious code in jsexports-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3faa85960d0da372c3591bd8e6336208f04090cc24ca88b734d8e84d5f389c16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in checking-ips (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 941a9d77f27a5cf03000409003dc26dc454bbdfe54ff4e4bdcd72c5184e45263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47015 Malicious code in checking-ips (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 941a9d77f27a5cf03000409003dc26dc454bbdfe54ff4e4bdcd72c5184e45263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xml-request-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21f1d42d43604327ee124527dd04dcb37f13b0d2c46a4f2dc3e3764c7b2000bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in typed-fp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88f85e49a74e33182eff1c027ccaaf86058d9983e9a07c0e35d1fbdaa896edb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47014 Malicious code in braintree-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 053257b915c2f0af69829fe05f32c4248f8dd415cf1a12103f297d5fbfe0574e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47010 Malicious code in @pa-client/power-code-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60c9037c2e5ca709c20fd2beb65a40e9649cbc3735c1989647ba5aae2889672d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-54084

OS Command 'OS Command Injection' vulnerability in Calix GigaCenter ONT Quantenna SoC modules allows authenticated attackers with 'super' user credentials to execute arbitrary OS commands through improper input validation, potentially leading to full system compromise.This issue affects GigaCente...

Malicious code in @oneaudi/unified-web-common (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20171e9f2ae7e55f3032123ab947e0b9f8cbccfb379a0eab62a30efd737da76b Any computer that has this package installed or running should be considered...

MAL-2025-47043 Malicious code in @oneaudi/unified-web-common (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20171e9f2ae7e55f3032123ab947e0b9f8cbccfb379a0eab62a30efd737da76b Any computer that has this package installed or running should be considered...

Malicious code in ome-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 813109d74c2326a2f6ec2d8189b807fcde2654e778172aef8555defeb27fc4a8 Any computer that has this package installed or running should be considered...

Malicious code in tianqishengqishi (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddecffb254d25ae1045c69e679f0d81b5b6e4489bb06874481ee686038135178 Any computer that has this package installed or running should be considered...

MAL-2025-47090 Malicious code in tianqishengqishi (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddecffb254d25ae1045c69e679f0d81b5b6e4489bb06874481ee686038135178 Any computer that has this package installed or running should be considered...

Malicious code in hrpqvq123 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38aee6b985b41f91e9c96ecd646b3c7918e14c51c3d97cacf792891f8f8126b8 Any computer that has this package installed or running should be considered...

MAL-2025-47069 Malicious code in hrpqwq123 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cebbda0574f9d3ae88ca29a1cb1e361c27a4fed067d19a24250e692a54bb8d8 Any computer that has this package installed or running should be considered...

MAL-2025-46986 Malicious code in mcp-server-everything (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 263d07d53076b8ca1efe56fcd69d4a4e3c6d6a496b6086a03b8bafb8ae58900c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...