Malicious code in hiagentevilmcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e09d1f143c91999c7fa8d60f7aa4164df3faf284036d40e6b655020c49bdb83 The package hiagentevilmcp was found to contain malicious code. Source: ghsa-malware 209c7d8065878076cf2456b7c62417093a08c273371a3bcc6059b240be5b3223...

MAL-2025-47473 Malicious code in aot-npm-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 387dbb36bb1161598fbfa2872fbf071892696c3a1df11c616ffa424495bacdb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47024 Malicious code in xml-request-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21f1d42d43604327ee124527dd04dcb37f13b0d2c46a4f2dc3e3764c7b2000bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in minimal-ts-webpack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1cf4c25b4f12d9dcd4bc5b39db0936c0be665009239c28b85696d1a55fafa36 Any computer that has this package installed or running should be considered...

Malicious code in pn-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6788e4d94901987d6b643edd5ac4d70be5b436465250b943c7d9793895d061c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slack-azure-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bd85e2ed9b4c56dd6a97f9bec08d80ee181b173bd49ba7f8bd4ea9bdbd421db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in typespublishercontenthash (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84b60b26ac3fd59e595dc1bce776b1f4aae86fb7f0068d8dd2483c237264ed74 Any computer that has this package installed or running should be considered...

Malicious code in scalavex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2c3e20b9de8d5df626f2290f08c5a19243ce682e61ef5b05fc6796febf73e30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in polaris-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28f78c9a4b910eaa965460101ee58ef71fa917358a0c9e7a5be01ae875e152b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/commodi-aut (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 136433c39e76cf9c4da076a7d7a183b6e17360912dc804dece2e76a6b1a6c98f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4203 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9ff504a12f9324bea5ecc26354ab1b7a0c0b06cb307819ab235d5a647bfabbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seadrop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 093d236f43b0c51ee4f6c1443bea6422a48b0359e0c2c3a56c0ba53bd26598d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reac6-hintl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bb2ec992efd8f399515cd5379980a8dc485a52be4ff5e6b5894a8120bb02319 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apollocli8ent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71ec83e1c608bec92e8461a15a2a5e9f661dcfb0e8798266a908b7e1793c5373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tkogyxdcurwhfain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 129d44d2f5528f185cd365b561f1d1fde431137d93fa149c043c65087fb27dd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rzwdkpokcixvuyet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56c0ea722b8941efbf31cd8abb5c01fa1217c7a992bfd91bec20d3af12df594e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ad1213 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb48fc5b78e7713e6d4f47e3ce2e1cec89e3c627483d706909acc55a68b13101 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 13-pkg-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d11ff8eabd16040bbd151481a728945ea4c50fe74433a661598e30c0d635d26c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in glip-integration-github (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d123ef19b0af085bb195614a52e47803f31b095cef00c45706371fd0a55b38a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in newtestforme1007 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba4fe035c33d4a7fb83cc19c0f7ef2851dbf12a7a841237bca7fcbf085efea11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...