Malicious code in elf-stats-sugarplum-fir-770 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba9b8e626ecf42f5770535353dad46da3dbae1b468a54040b1024c069ead0f72 The package elf-stats-sugarplum-fir-770 was found to contain malicious code. Source: ghsa-malware...

Malicious code in parashaxmgflhg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdda116bd0a2b0781e654220ab234ff95b506895228408081d28a8feecb133a8 The package parashaxmgflhg was found to contain malicious code. Source: ghsa-malware adaefa29b084fb54754d232d8977f7e409c217633c600de7989054b4e12536ca...

Malicious code in react-svg-fill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995c6ef17232fb1949de6b62053246036337cb070a7b06a466bb122d789c9ca3 The package react-svg-fill was found to contain malicious code. Source: ghsa-malware b09c58dca53550942f8c2595496e45d321f85551e7ce7a94e7059e50448f4709...

MAL-2025-192300 Malicious code in elf-stats-marzipan-cocoa-562 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5eef2a7b97397b3b317b2e74da3cf23e6c43147a144bed8c3fbcbb35ca6249f The package elf-stats-marzipan-cocoa-562 was found to contain malicious code. Source: ghsa-malware...

Malicious code in normal-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3cc821206cbfa969e8f4e3472a09caf43736b8e70d4ec80ed20931b64406b8 The package normal-store was found to contain malicious code. Source: ghsa-malware 1e1d6a2537e74912ec3831bf85e49e8ba908fc28838ec60c07f7218717ba36ae A...

MAL-2025-190562 Malicious code in node-calculator-3e62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1703fc5c6d064d50b797ea676b0a02186a5cce75afc97191661b8aaa82624543 The package node-calculator-3e62 was found to contain malicious code. Source: ghsa-malware...

Malicious code in abeya-tg-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d3c8662c688eccce2f52334ff40029218abfe48b990a194be49c6e01f5fb57 The package abeya-tg-api was found to contain malicious code. Source: ghsa-malware 01b4d597b84a4aa049cd970002730cf004fb59ff7fb53a7c70196644a0c047e4 A...

MAL-2025-49081 Malicious code in dezcord.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1376788b01add01972ac5e18172db4fbfcde5c78e3f51eaf8fc170e5d44532c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-modal-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f83da8504c0563910980ac20ded60f00f0dcec4e105148e06d6115d0596162b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48340 Malicious code in project-serum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c390d6d9b15f1fb2c2ad9b8e802cff831ed02b6028b111d2937705df46f3fdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48287 Malicious code in sp-web-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18030241ea8f0cd79b1c6d323dfb7f1de0ede76c967166f73fcf51108f2ecc52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48249 Malicious code in mad-1.4.2.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d0a5225829fc638c078c685eb6af4bed3caed292f068beb8b26ce84158e7cbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-1wc4gw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41fe6c9bafdaeb273178f0f0cc9ec19f30ea4e747a6f34b46d6f5e1b4ab5ab25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48232 Malicious code in redirect-xi84nq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6745145a986be45b412431fb40e0966c09c17c55a87f3daf4fcbb3ea7bd76362 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-rmunkl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7c823e800eb5cb9b5cc10839b1971def19c6b3eff41ad1d7841688f733fbe55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raecaxhaartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe29fea704a06f289fe9b4b2452be4a675d0da115d1936479e9c0d7f544cc002 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47944 Malicious code in solarpeng_node_eval2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0319cee3fc5a00c3fe093de4551ea4ba8efca92792da4582e8571e9a4cfcecf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47554 Malicious code in finos-legend (npm)

The package finos-legend was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d52237f76bf811889cf1da6bfa8df5deacc81e076c88890187022381ae951370 Any computer that has this package installed or running should be considered fully...

MAL-2025-47176 Malicious code in chunk-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d38a27025a3781b68d85bf387d877d8eae3d40bb6bc19c9edf52dc069d47773 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in style-postprocessor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25f023d8b7876e055cebe61a886a5fea11ea9b7c8eaeda3468cc1b18e27dfbe1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...