Malicious code in language-ring (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca7e9ac770686a75d1d581c790e326d66e60e71b9caa83f387a527c3d5e2df88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2233 Malicious code in @shein-components-test-ump/text-to-speech-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a51a7cd403f53cbbc65d804830060941af889d9ec0f60acd449b59f89a081e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dt-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f84c1cc320f830bd5436c3d7b8ccef2d0d6a0e8edcfd05e472854ed042a5b0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2260 Malicious code in image-watermarks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 696779031d179d99d69d2fd89de3ae89e25e8bc093c528000aeb73c0bf7525f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in better_dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4526960d827ae5486d65de8383708d021ba89326b548041564c96bc0aeb9f835 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2278 Malicious code in rexz-imagine-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a5880974c43ddaa1e24f3eecce7e9eb1e66d31adb347a095436a27316c30097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in linear-open-issue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a73eff632d074d970750852ec6e11f70aff4d2291553664b9f84289a189191e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crd-frontend-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c225ce49c193ec137ef2d44bd0ded4bf9da074b818bc455cbe161574dd87f02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in layouts-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 668d31349d49bb3ffdf31cb641b2829be6ffcae92877d17241a593565a0dddb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in leonardo-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00fffa2191cd0445f846c0be2c67b775ad60931115f668721c2ab552760746b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-unzip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd99263d19f7c6599d64abff02934e9d436d39de9b4b3c4f1d3984ccb85956f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hookform-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c03aa7176706f7dee9f4c1c8f7c4d645d4345a2a47865b7924eea6e8b47a8101 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-hahahaha-rce2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59d51a9f44be7e0cad42ebc638eb04be0e5e9b52503c0a61c2d1561e530de991 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nnnn1111222 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b648679c0195621d738427824e86329b24252cdb88b8488f0528db1938965b05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in v1ue-custom-widget-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f7e56b04ae3ca44fba371adba340a3933b9fb3e7899bc2da0a2c868373970b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @airtel-lego/sentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e126e868d890d40f42157c798a5f6385a6b2cadb73c9a125606b59c79057cfdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2131 Malicious code in toloka-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c7326d0e79737f24ac6ba12b7f58459b7aa76c833af0bffc5791d2ef4f1a1ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sol-web3-bundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e73dbdaf8639ea1c473efeb0189d43de845d8508ed24ce8a3875f0acd549d1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2106 Malicious code in header-account-flyout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b72ef9cb3a0b28a205a9c6fc545e26faadf2dcee804863c796581070b0871fd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whitebit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 281c3a63872d73a99ed3e71fd5a15acbbc2551f1922b2b295939ba05ff4b685d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...