Malicious code in ts-config-mapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 991f5b6f0d00ce1e267299db5a6e4d74717173d1548efb94d68345cb6c8f6dc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diendh/n8n-nodes-tiktok-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a12e0244dc2ac8964ace7fecf5dab971eb0b394e2979bce9a3e12ce33b01ce The package @diendh/n8n-nodes-tiktok-v2 was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwind-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a9b7a9c02e83e0b4145dc9caaa9d04b407a199ae5d54b9f544f91397980966 The package tailwind-variables was found to contain malicious code. Source: ghsa-malware...

Malicious code in set-nested-prop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3ace4ffb79a5de4b7a82ae75ffdcccb6233dce2bfa2a4f32f70a3dc6921a03 The package set-nested-prop was found to contain malicious code. Source: ghsa-malware 35b0b9a8f67ec13668f93a14f45e037dc7cb3c33fa4c688e13b10a3cd2c5d3a...

MAL-2025-48246 Malicious code in mad-1.2.9.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9ee7df3c05d745488aab56d8e7e24dcc135b735d5f8b1f7a620b635e2d1514e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4097 Malicious code in lol-project-2017 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 713140b3d10253eb856068004fa4bc07dfbc38a48b4f0a2a706fe7c242284553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aiide-cur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f87105b04445846be4b509793882c19f03cc302b5a62c868a7f5bc603d6ca1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethers-provider2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64291b6905fba089a2dada5e0215c20954bf12f15f76d27c5c341d2b91baa81b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in attacktree (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da476a4c6326fba7be03913b209024e9c2bb6722dc57b4f960812616dc161f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in easytint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e5495864d81fba85645e204088cd7376227401f94eb66f80f2189223f3e167b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10991 Malicious code in node-prom-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b54eae558cfa7e2e8291a99764e3a498e93667ac6abede39f44d5a0ebd1a4f1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spiffetest.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7e0c969021c51af38deaa5a56acc3f6a7308ecf137e4051ed32c13918f6f002 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8085 Malicious code in noblox.js-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062619601a008f4292eaf9453ebd17f78bda5a38e3f7cc9d06669c0366f09cb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discordwebtest3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07fc6280f498cd214de7d4afd0a46edee0c887c1377a342ad31e365f736ed539 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postman-zendesk-support-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3501f72f7b7c1700a90f7ad5e3a55cd2462c210637c68dc75f9d336e9bf0063 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8012 Malicious code in b2b-canaisdigitais (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4dc971b04d6b1823268396807c41d808cc18fd8c2b2094b5c9ee6fb342083172 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malicious code in fc-customer-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2d285e54aa297d074fb908486497560ee5e7fa75c0c415eda550717a464d868 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3929 Malicious code in ion-schema-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b4a2800c0cdb5a431b4b8f4465ae513b1bde0d95be14f21a2fde8bb5f6733cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in recsive-read9dir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3295371fb4850c1492347758416a9d70a20fe52d59526b62a969c6537a69e535 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hfilesa3ver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdd0b31a7c5ff29dd1d3d5921fc91b79fb7819acf36ecd8b499259b26a3b2505 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...