Malicious code in victim-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1083e685ff2838a4f012f22e785948c7ada9261aff457130e7d51e8d92eb3e55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hakai-xss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e8cc768298c405c50172bb23eff483fb8ceccc9bcaff232474cd9fc397e59cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-loader-fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1700e85206eea0c06ca2bedd5155e402644feb176d29155bb5194ebaa3096336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xero_ruby_oauth2_app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df775937f934e6eee2161d71e8e61cc59dab858b11abd32721c7bb957ab91ee1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in how-sezzle-works (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8357087de81359973557c6bb5ec8ded0959d60d77dc8a8da4807ae8f57f9222a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3913 Malicious code in packer-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1782d63cb233376840f8858730ae3188cb861a13f2d159a3a045a4157017f0ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3902 Malicious code in linemtxworkloadui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bc869f0e5403668a9895197b876def013a0a60be9f956922a83a62e77c22f0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @thekrishnakarn/healthier-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0650d59765e93598c4da0841623af6a8f7c9eb7e91136841980a7117164a923 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lmk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2038ad5438e131b27ac4909e8adaf2ed1ce6a0667a10b46ed02c33209e2708a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.meta.xr.sdk.avatars (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2819b05ade219214d57904bac7d545f37b68824e1a40e52668c7b6751d543c49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3880 Malicious code in cube-sign-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc7b296732045296d18c9e2c5c6ea0f8feaa1bd21693f62a60cea65af5525491 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o7rcyti43qv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c285a13bb56b44cd12672ac267c4d3bd0c5633ae97d13d71fa83cacaf7a63807 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cp-area-nao-correntista-fgts-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8095eb5ae7705ce9b30c64714683d8be1cf363c3775707e2900c35ac10eb4a86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ctalking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b0bd0f0689ac862a7c01e77498ff68470544cf1aa43dc3b59172ac04896d10b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in att-bit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c60087067856675af280cf9525ccb222374a8ecb4467310fa46160b79ea4a5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mozilla-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c90ec3ba319513f7c6a1ea4cd67f7fc483bf2771087d2c78c1371a1613d17d97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3816 Malicious code in att-bit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c60087067856675af280cf9525ccb222374a8ecb4467310fa46160b79ea4a5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hotmart-org-ca/cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4248adb5119119c8a93c3615e413df74e456739391ebff8e89f978a212a0659 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testqwee57985 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3598ee25e4c608f570194a3c2f83121f1978733f81ee019895ec855b7acd8a48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unipig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd7ac3cdec95558ed3e5a4e37325f492860d532de1cb8c3013e53a21ee441ffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...