Malicious code in dex-core-v2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43ea4e0d3d0e8d1d1bedac44fc35d275146740cdf21e51a4328174bc6304e064 Any computer that has this package installed or running should be considered...

Malicious code in jwoiesk11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8272ab239b8e1ffc477bd4ffb90538ddeb7d1cd11f6bba6b8ee8a396aeafdb61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oneapi-environment-configurator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b59cc2d584cc83aeb72d1b1e463e2f4423a81b86d2fa4b7a2bdcf7867bba348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5670 Malicious code in bankersbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b58330b4e53f3d1ec772627abe8ab65d077ab40fa89bd51741ebf8ec708f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in berrynet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f54dd403bf9ea745a960f5acd6f5119e6a874444ab0bfae5660880850cebea4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in my-js-cdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ded23b9cb07e2872a7f6c888c1561c2341dbefc0efe38eed634d46229785725 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kkyun-display-flag (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbf5dcd7042eb6d07404348b3566e81d0430bccbe3590ddf39941414f69e4216 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solsafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c0e330c03bcbf5c40a3477fd4fa0029e71ee952bcbdc57bbaf89d39cbec85ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in boost-chii-90s (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce6390292c9c894f446340d69e7ab97d7fc565aa97aec4a06eac08dbd93e56cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pbr-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4933f0eae305db421cd46414b1773fb97338c6966af0abd06e1232ffe4c4c96f Any computer that has this package installed or running should be considered...

Malicious code in securityresearchpocaplmalpkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b52864b8ab4058696fe0a34e9cdea2db8e1f9dec2fdb22fac1adeb4143cc63a0 Any computer that has this package installed or running should be considered...

Malicious code in pp-react-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d146bfc260c9899fbca17ca2d9a3084b57ba2c8245e364316af0a3c9ed4a6153 Any computer that has this package installed or running should be considered...

Malicious code in protobufjs-protify-example (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a1fc26bdc2549188a81eca766317ffb5fdf7c0f904db9df458c43a670a86951 Any computer that has this package installed or running should be considered...

Malicious code in atlascode (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8253ba20040dbe36a55d6e0d506f11c3fdb26fc8991cae009b2da2531d971433 Any computer that has this package installed or running should be considered...

Malicious code in protobufjs-websocket-example (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a5372e68ba0b48947bc24234bd3009eaf3350edf61ca65bd42229c19a046fe8 Any computer that has this package installed or running should be considered...

Malicious code in confluence-inline-tasks (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9108ffab0ab767db4d505617face5df5b4ffd6d83b9ad5b0be43b22f50f77f7 Any computer that has this package installed or running should be considered...

MAL-2025-5622 Malicious code in onramp-demo-mobile (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 126a99667f6fc4e7bf8fe4a326ada712703d5aaef88ea752eefb365a6157b1a9 Any computer that has this package installed or running should be considered...

Malicious code in auth0-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bb8364e4a661d732190dea931ee1bd3aedea3c1005b1daa41507601bb281443 Any computer that has this package installed or running should be considered...

Malicious code in caglass (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e455bdcd125bc7e808bd44aefba85c1ef5838aa36b61d5fd75f2c6f026bce1b4 Any computer that has this package installed or running should be considered...

MAL-2025-5599 Malicious code in libramat283 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2f0212ab46c6a0d5aabae8395896759602aea50351eb964e8292a154034fbd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...