Malicious code in dijit.form.filteringselect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b97cbd73b29af6ebb3656e8e0e06d372a53415cfdab0b55b7f6a2ae9b4c34dec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-svg-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af2a1717363aad3bb129687fc2526ded4d96a8d7e578862b6d400cf5864e1985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test.relativity.package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0622baf7ab0ff027e2486e3839df7b968fcf6e47ba57656415c1b3a1005d02c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vscode-azurestaticwebapps (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6d86e1274287895eb9b8f392467eb59e1636c384bc7d0b77c9a1da853b02963 Any computer that has this package installed or running should be considered...

MAL-2025-4994 Malicious code in bs58js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a4f78a5795b0e66267f0404c4caf2c191531655570105421890dede022ebc6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pipet-code-agent (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 848b7a72d8d85ada52bafd17d3a0a4550d76cdaa38138f368599a1d0a16c6358 Any computer that has this package installed or running should be considered...

Malicious code in zora-logger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feca2e7f9d5aafeaafed7175bed1bc94f57e9d037a6427f54219d5a59ecca0a3 Any computer that has this package installed or running should be considered...

Malicious code in newcheckout (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab73dae51de90e537d8afaee36a7058bb0183de2d5489893830bd77d22b5e6f5 Any computer that has this package installed or running should be considered...

Malicious code in wmreact-p13n (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 814a26626dc52951567560e4f3f5f6854b8ead5b224ec0b06c421df6a0082584 Any computer that has this package installed or running should be considered...

Malicious code in requests-json-overview (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8009e6f4e6416f898819130b2befd315297272af6764740f522acfd719576a0c Any computer that has this package installed or running should be considered...

Malicious code in react-sdk-module-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c328baa339da0fb222b6ed839e9e024e3df2427f155e95d650451d9a7c0d49ce Any computer that has this package installed or running should be considered...

Malicious code in solanautil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a994a5a77cea13db3655b647260e91eb43eaf01123269218c0378fdd8d94db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in husky-es (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7389701dece7abfcef40d0bfff8c26f78ce0a68100f40bff5e834bf57d6e637 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in izat (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d4b31edff23083b4856a85c28082ba87105b963e68ddc7abd96a799d5594b09 Any computer that has this package installed or running should be considered...

Malicious code in hello-gator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99c626fd5c61521e9e6c52377eb5d3a75ea4230c12ca16c294e86ead8364c064 Any computer that has this package installed or running should be considered...

Malicious code in bs58-decode-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 365e9781bfa38295c42e9eb63d2506e4d79922f9040b5ca8f39544eaab056c91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in springboot-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a8c54ec931e96de6b2788e07cecb1d64ae325d3df32749035073a24f1a762c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4889 Malicious code in springboot-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a8c54ec931e96de6b2788e07cecb1d64ae325d3df32749035073a24f1a762c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rpc-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87182c83e9db057d45382e581932553c84fa77422e5721046571790adba09005 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @loybung/provider-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dc5e2aaa75780249ef49329cc88e74468511da4956872cadb22549951afb87e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...