MAL-2025-47022 Malicious code in typed-fp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88f85e49a74e33182eff1c027ccaaf86058d9983e9a07c0e35d1fbdaa896edb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @magda/semantic-indexer-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020b70c247fbc09223610616ef9c39ce27218404bff50de29b8a28706679fc14 @magda/semantic-indexer-sdk ships a minified dist/index.js bundle for a Magda semantic-indexer SDK. Static keyword patterns fired on the co-occurrenc...

MAL-2025-47087 Malicious code in showroom-navigation (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 109dd8de3c4204701f6e5b873a655af5697b8184549503764bd6de8d330506f1 Any computer that has this package installed or running should be considered...

Malicious code in service-config-endpoint-provider (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0879016c96750d8d2a0320e43955954e5f07cd7685cd65103101b1b9d3c3d7e5 Any computer that has this package installed or running should be considered...

Malicious code in hrpqvq (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55f4d5b1b37e9dba04434f78d420f3de4da2ed55cdd40b35885127903afc5491 Any computer that has this package installed or running should be considered...

MAL-2025-47065 Malicious code in hrpq1wq123 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1723d1a69b33a9e203de3ca455da66ce2a37a8e1b6a65edc18c77634d2c22ae2 Any computer that has this package installed or running should be considered...

MAL-2025-47062 Malicious code in hr1pq1wq123 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2a09dafabe0a4b58bcb6128f232552b08961a683b79cd4f2aa41be77c0c2300 Any computer that has this package installed or running should be considered...

MAL-2025-47068 Malicious code in hrpqwq (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f61b8d566833d9a79f81fa26da24abd2408ff773f6e72c3fcb76b67cbf3b3d8e Any computer that has this package installed or running should be considered...

MAL-2025-47063 Malicious code in hrpdesign (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e370e366167f90ff8c5a3a171abe2bb14e301cdd2d5499e98f66bd1e653fcf88 Any computer that has this package installed or running should be considered...

Malicious code in supports-hyperlinks (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b84cdad651002e1e7ef0c1095ad079307474d09b03369f3b025eba0188e377 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in chalk (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 985b6546ed08c8482326a4819faec318c27c1f6d7518acdf384d5f5a8c1453aa Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in color-convert (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71ee3370ed9cf22bf89fbf40c954408a6ddcd17fbd38750027a2b7fab6034bce Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in backslash (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e028d39ee4bd2bd3a487f4ad116e77bf1582cc08b41fb26fb56f8f83049f90f Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in is-arrayish (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb234972f25697d7cb6b5fee49c919d030c6f82ca0fa9068cc69f3bed952d540 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in color-name (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec95d0b2e67387181db7dbe2f93160248e40a3f6323ef1ee75b116f621ac5af1 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in optional-native-module (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb3a52068ea70ee162c5956b77baeabb8d46582ae8c096ce97fc7ba4fb7ef37a Any computer that has this package installed or running should be considered...

MAL-2025-42151 Malicious code in moodle-core-lockscroll (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4593d2f53dfa6444f6bc77ab415228cf1bb76f6ffc3e62b0973033f33bf3edd Any computer that has this package installed or running should be considered...

Malicious code in moodle-core-notification-dialogue (npm)

The package moodle-core-notification-dialogue was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0744d3959a7e6cf0b70432a2b72939c580eb705bf7e14a8f4569ae3e0f571164 Any computer that has this package installed or running should be...

MAL-2025-42145 Malicious code in logging-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0433a58c0d2019ba753b2ac69bc12319ce704bc3fcf7ff537ccea2164e1e8f31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-42138 Malicious code in mathy-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40181e61c8885579610a7982c1d9bb6de781022905e9b58618fd8206ba45347b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...