Malicious code in @by-device/fingerprint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0b58f4a1374ff973bdb10f587a6d3bc80207b12a8a85a4edc4f3db66139847f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feed-testing-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37ecacad9f24ab5516c2aa28546214f1a2fa2f1156c02e06e9e9b8dc41365e8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fb-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0508c19ea3b1a69283368c7abdee9f8cfdc4980c85582dbf3573b9db71328932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ideals-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dc50c85c983d6fae92067eec047d6e22d93ddd342cca6345a30c7e42c4e37fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in compensation-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddf28334129095b5b6e45372c4624f6813fe73958398e24474dc3a1c0e1d18d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11221

The Full Screen Page Background Image Slideshow WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...

Malicious code in lodashing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bc06ac67ed3a5e36a05578a4914e72c57833d27babdad196f17a54c1ebea3bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3837 Malicious code in mmsdk-apml-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware babf5466e67db91bc3f90a5ad7449859bd39b7ce9dfb72a73e1ad01d022f3a0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3840 Malicious code in mozilla-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c90ec3ba319513f7c6a1ea4cd67f7fc483bf2771087d2c78c1371a1613d17d97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3815 Malicious code in airtable-blocks-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a563df0782e092825d76e13be3d7f6df53a01cb0afe716bdc6a1bbe63692f9d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-int (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d314fd1e5fe72ac326ff48b35eeea0675329a3035ad79569701b5e2b27c4e198 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3807 Malicious code in @hotmart-org-ca/cosmos-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89700d34b5a1408237d5b8242b8ea7483428776eb1f091232bd3c1aff711a230 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helvetia-base-patterns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3682a1cff47d9425b9d7c8d820704387f078a2f5ee4dadc955da09c859c23579 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3857 Malicious code in testqwee57985 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3598ee25e4c608f570194a3c2f83121f1978733f81ee019895ec855b7acd8a48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in custom-social-connections (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63d17fbe69636024ad8599ea6675d12b5c1473dcee490a3f63f3bc80a0ad7f60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in auth0-authz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5de2600b08c1473abec0bac3c49bbcd4fa9626350cd3eb9c2d325cda30b0381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3819 Malicious code in auth0-guardian-management-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4489a903f859c5e165cf70220daabaaad24a21cdb1705bd94dfddab893954e72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3821 Malicious code in baby-electrona (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec384e55b0c31502cfa3a8ff82ee55f1991c43cd00c795f71d25165f25ac8490 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @support-editor/a0e50092.fcs.pw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee59e601418c129743ca46562e34ff738cb94622eb4ed6a44c5d949a282c7fb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @equis/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7017af11f786172b41ddbe4efe5d6f38373a9146c8b1fca39e212ed6403f8720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...