Malicious code in attacktree (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da476a4c6326fba7be03913b209024e9c2bb6722dc57b4f960812616dc161f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2463 Malicious code in ear-gui-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2627c1c30ce11ca3ef62b95cc12a6777f5fba58b16815c1ec7b4f8c38af0ee67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in core-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5db7bd8a50f90b0c2bda2716a859031b731da7ec6f2a6bdb9ebe567eb5b042ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2372 Malicious code in dev-debugger-vite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 836268a49761be0bbcd6dd89283cbaceea33d8ddf28b8fec0ca5337c318eba52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2376 Malicious code in dingpeng-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b75b0aa0d412d9ebbf20ed32ae7e5c4505eae72feb5ed57c0669192cb6ff8c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spark-botkit-servicenow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db9e7b07208198145174b016dd7c98f443f46d0605e07e3f8a84f24f58efd4ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2379 Malicious code in elementor-editor-github-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72f60b6d3f909084d15e59acc80082db35f713c520dc29ff74ec2a79ceb33dcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2406 Malicious code in reason-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0c4a55fcc5c8561afbb5e8b0657b735402db2afe7ac15858050352a3a8aa8c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in digits-electron-src (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cbfd2aa51f6d4ff7a9bc75c482e5fde9d3f100b1f911d8f55dbc642696897aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hoist-non-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 424865e2aee8385bd2b6cf103c939dc9a1d3d8784efeb6d8f197d71de928340b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @od-react/od-react-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af2013a6f5bf71bb192bd9c077faf94f1b589b3fa4ca56d2f9038983e8fa35bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secureshield1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c523ad578efae0d36959b764d0ea4df3c7c88342580a6b3903a2873af85619e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dvd-ai-pc-rag (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a767db3d0d8194ea0442ea2138060477dfc8356ba986a5e7a707145af45d9427 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2351 Malicious code in @sheingroup/babetonight (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a9f5da4050017cefe506f3f3fe0288f57099a5eb659ecd363835423f33389eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mern-ecom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81fdc4ccb8d87c17695fc5ab8f7f8e41ace4f8047187df568530dc8f34d311d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in company-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 100c9d7a50130bea1bde224e847ea63eeaadc65dfcd332d6cf0132d686af772a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rolldownload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e57796af333715605cb3404f3d8653189e6859e7d409e69670109ab17dad2ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2302 Malicious code in codebarrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c801f0c455ad24f1a8ae960118a1bf1dab534b8279e3429ac736dd113fee639a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2304 Malicious code in core-registry-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84d80a92f4bc9e749a6e972e2ce5a00a5861906ac964b41440b6bc71194dbb65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in code-snippet-editor-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a18fa3d11188e4b7891ebae39b972feeef16bdfe9a92659b7efc450374065e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...