Malicious code in flight_lab_control (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5d324357d4041717da0277420513760dccbba17821ed9538aa033304d5f073 Any computer that has this package installed or running should be considered...

Malicious code in org.cocoapods.csv (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3d922335d96d21629591f3c06d391cc64ca4117561dcb9711fb65451dd841e Any computer that has this package install...

MAL-2025-576 Malicious code in ig-lighthouse-to-influxdb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92e8d076b669d18ea59535f03270a27adbfc6b0717789403453fabeb522b988b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-566 Malicious code in airbnb-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58a64fdd730093f2e15a4208e7c8c3a330b7ba9fd2d264fe0a334a530695a5ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testidneel-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2d741fc56c242ce7ac9590ccfe8a91cb20e28e9e9a3fdc9ac721258723cc082 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in self-bots-dc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d57d5a05bea1dda9fbc71d4016a47c33f2a89150eef13a97d587db0329a7e7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in op-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc75870385e27f624816db6a388a5a188640a523bb7d967dbb848ac33dda21b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in request-external-access (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf57b443887e773384068e114f407f70b10c0278c6839c0d5c34f2ba575a63a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tour-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44bfdd42ccd9f1335cf7f7b07ba399341a0a93af1c683563cf6a63697518f580 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-304 Malicious code in sdk-coin-algo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ea750c35c4bec1006a22374fd7f8e5a426522380aa5d0566f1c97875ad977b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in design-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a127fa5f9bae939a2e9a5c9f4dd17b801b5dad70a7299913ac5245397aeb519e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdk-coin-bsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ff426abeac1a362b4c6e28dcb79500a3081d0b1b5c4fa0945805a55b97adf05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-274 Malicious code in blockapis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dcc6d47857bf84c442515ff65b4504f036ccff55a5061b10b29abfb7d76a03e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in composite-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb0895cfef58bc04374e30ca74fe5937d86332f548841883b7903c9cd2053af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aem-react-editable-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fdeb2ad3adadbbe85aa33bbaa3ed1728c9019c415d8c1e218db5f1f72661482 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calypso-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c632a7ae908f27bebfc5797a394543dbf298fa2b1f79197077b9227c243a5fda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-277 Malicious code in calypso-babel-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b19b336747cffb6dcd17e2bdf7369eaeffb28fe85d0c8198710e89dbced26e94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calypso-apps-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f0031b185706e20041563f879032469eba6e8220fe4d6fe93acc11cee6235c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stormapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf02bb5fc1c5f143294af3498d46e9aeb5dd417c0559e287c9313cee7b3f43b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-221 Malicious code in prem-babu-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1765fb7e46e7aed9b40aa642e962e113033d9c09c2fb5dba5563bc486baca886 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...