MAL-2025-49270 Malicious code in style-tailwind-variant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44577e5c235fe9163b6f47f81c7813a15491137478bb6ccbe5fe45ca911d17d1 The package style-tailwind-variant was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49258 Malicious code in genesis-drop-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edb9a242cd3f939420031dd53e6057ae90e644f3a08fdc50bc1f92d1296832e The package genesis-drop-actions was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49259 Malicious code in hemi-tunnel-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9feb879a8f0ac0f1fb2619e70c3754e9f3f5d12d43e0ab6ea159cf029a604b The package hemi-tunnel-actions was found to contain malicious code. Source: ghsa-malware...

Malicious code in hemi-tunnel-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9feb879a8f0ac0f1fb2619e70c3754e9f3f5d12d43e0ab6ea159cf029a604b The package hemi-tunnel-actions was found to contain malicious code. Source: ghsa-malware...

Malicious code in pixelblm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d62ab0b93a24a50d76861d245aca1b9d067170b8dc681e470fa1c003f2eed10 The package pixelblm was found to contain malicious code. Source: ghsa-malware 2ee65b21f5be8ce779e9dcc8e25883cf38d8856e9c2938e1e9949ad4ea50c111 Any...

MAL-2025-49263 Malicious code in pixelblm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d62ab0b93a24a50d76861d245aca1b9d067170b8dc681e470fa1c003f2eed10 The package pixelblm was found to contain malicious code. Source: ghsa-malware 2ee65b21f5be8ce779e9dcc8e25883cf38d8856e9c2938e1e9949ad4ea50c111 Any...

MAL-2025-49362 Malicious code in snavbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5af4f54b61e8c07cb80d8f65c7ff554627597f600fe3b67094eb71097903548 At CLI startup, index.js downloads three native shared libraries sbx.so, bot.so, v1.so from https://$arch.31888.xyz/ amd64.31888.xyz, arm64.31888.xyz...

Malicious code in operations-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e279a09b8ba965f892f0b7fbae2dd4de1eb039500b8e3e1a52a903298214abef The package operations-packages was found to contain malicious code. Source: ghsa-malware...

Malicious code in quantum-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144aa1474c1b5043966e321c81c29f0fae41f764e0948ee5491baa14a08563b1 The package quantum-packages was found to contain malicious code. Source: ghsa-malware 615e247f6ecd82d6ec0aacb0855b7a222aef75c2834a024b3b99ee38c2e7fb...

MAL-2025-49084 Malicious code in etherdjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d33f9046c1fab70c35f189dec4d15635c281418afb4442a639145fc8e445c97e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in etherdjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d33f9046c1fab70c35f189dec4d15635c281418afb4442a639145fc8e445c97e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in artifactregistry-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd347194b3db170de6eee9d04102cfda66c40fb1276cc13c04cbdb81db0b33b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48985 Malicious code in artifactregistry-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd347194b3db170de6eee9d04102cfda66c40fb1276cc13c04cbdb81db0b33b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in syntax-dynamic-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fec79d7a70cef5393761c1bf6598e27804e363c0873d62590fe06b49d3bfc4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49061 Malicious code in uach-retrofill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 141cbec0058112e95aa84fb85bbd30f951bf495d0ce2c8b6d2148367eb7e6ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gitlab-lsp/workflow-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77c05dd20ff8e2d3c07051d2f1146ac86522b9a72a6964e27122c9dd02d4c7a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gitlab-test/npm-v10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a2cc1d206acfbb6ecfb92153bc522f6649d002c96ca2cb99d3dd7367520f64a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @decentraland-gatsby/intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c478ce47e595b70be3bf3ed4905775006b6e270a90bbbea45698e1817c8315ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in typescript-compat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0acc4ba0bcbd7793656800efb10926d4044fa65326e8bee88e9b92d2504bc668 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in durablefunctionsmonitor-vscodeext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0bcd6dd0f47781eb145c4a57e94a505ad8fe070437e096926c7c5a7601087b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...