Malicious code in @loybung/systeminfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5779cbba538d4eea9269a796d61711d7b6cd149d33927746618c91c35bf31496 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zlib1g-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa6efdb438d569565922df7e3f3cd142e51dd3fb1e1fe0467a71399e26930faf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scrapy-user-agents (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ff2592eed2257896f8765049b3073fd6bb14f2696691bb3ed2f8925b0ea1e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rlang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd289b9631ea3f924b676ed269036ef6847da93210a3a684e5ef151915e5913c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ohhttpstubs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 642efaac1637742aa2d3755af417f202219293d844b0c0ec46300fa7fdfaf046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in networkx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ca30d930400b8c13a77995d9249cc90207ed207eef9973b5ee86f4c79866ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meteor-react-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10edb5e94e2b6aede51af9b2525726341571187cb32e9a56e9b86639c7130341 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in libp11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3af33b7a528459e84cc55723ecd56b61a2273b9ca8d6d54e18dd9083c9b62360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iceberg-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80881b9c9051ea4744eeccd8038c44bb7bf6fd18b1535d8319cdf556cca76282 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-auth-httplib2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e57c6a4e7ad5efe49fa44cffce46a4872792f3f1225d726be0b6a6c3d5ed156 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in espresso-idling-resource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 783a8905e5ae890747d02955448c18b9e8ea3bb082a9c12d5eea209a54c33297 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-reactive-decorators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d84c1b54fe2e6e15578eaa4b72424dfaea95f68c7a2f8c9107d9d031dd0f8ae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in commons-fileupload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 176e367d438eb3f5463d593e36cde70f38d1f86a0af240ea8669e0c8a25ed516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apple-appstore-server-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ffc44075c7a6123e6fd516c9e8c1abbd98b481d26ae67ee10e814bec86bbe7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in keepachangelog-manager (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7624090c3cb084270916fc61df883fbbbed216ad3a9c6133425e1d39d682e50 Any computer that has this package installed or running should be considered...

Malicious code in sess-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d881da182c700bdb8c7c87dfc1b74eb7fd669c9905fdbdbafd08ed876b644959 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4744 Malicious code in gs-payments (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83d0ff4617e5d8536d36cf0582895637c1549337a25ffacd854bf066b33ce9fb Any computer that has this package installed or running should be considered...

Malicious code in samba-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ac75992403506206a4cac9274cfd007d488518e22ee13ded71dc02282208b71 Any computer that has this package installed or running should be considered...

Malicious code in staging-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 061358db77d2084ccc01236a956a493bd28d6e2f975a14bcd9651699a3eaf352 Any computer that has this package installed or running should be considered...

Malicious code in launch-darkly-provider (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6696ff99444d08a99f63e53ce846b37cf11486968604779920e29d8ca0185d08 Any computer that has this package installed or running should be considered...