MAL-2025-48154 Malicious code in redirect-elvwba (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c14e9416f39f79fd57b93fde303c49ec9c250008b3cef0bfd26c4eceed6da7b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48144 Malicious code in redirect-cj50k2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bf557860ebd2c98ec4729637d4e893ebe732fbb3c8f460b9e8d87abbd473f1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @testcarrot/supply2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c6b1ac7e0d732e96fb12ebfc09964c4e8a5a58fb8b0a2dc11dab3fad6c78359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-content-parser (npm)

The package react-content-parser was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed262514ac58c1f13a4761aa92199769727342ebbd70431d112061e34da94a00 Any computer that has this package installed or running should be considered fully...

Malicious code in postman-json (npm)

The package postman-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63e81e735aa1583841441847e7de0a269d581efabcfdcdac7cb7d6afd64df258 Any computer that has this package installed or running should be considered fully...

Malicious code in eslint-config-detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c532e5d9ed3c3afdaf7a4a59234c132c6176b491fc96676828c4f0dd5eb415c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pumpfun-sdk/metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe74efc7770fd428add3639b89ec07606c3be7a22d6c185ef00ad4beb39b9c15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @teselagen/sequence-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a11d947c98673c88f928f02f1c998436f5b00cafcbb36643500a2d0858b8aba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hrphelpall (npm)

The package hrphelpall was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0659e24ac59a9e845dfa85edafee8ebdfd35a1032ed6b06c19a7c20b80ca07c Any computer that has this package installed or running should be considered fully compromise...

Malicious code in @magda/semantic-indexer-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce59c9b39eeea0aa22df5f00b970f2543dc5da3003c0e73618cb45830d68274 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mv-hosp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4952f8c63bd825b267e27af4ca78405659c40fa6b10ed3687573b348a92c690a Any computer that has this package installed or running should be considered...

Malicious code in mimelib2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63ffee5ddddfafc58e3b65b97a362d842d02a6284d4d51de3c6dcce98b7eb1cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nf-cons-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e638446c9e65c64ab2f4781b57b182ae1de4c1da746270215e07e09992fc954e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v730 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07e8e1cdef56b10548337d022340fca1a465be7d7a13b0ec39e4c2193d349102 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in axio.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bfe2ad5a0a19b2113a984106f8802f798b7545a802731bd8478cc635df4defd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aspnet-asset-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 068ec09bafae1223e1ebcc83c97b674b7188dd9ca13b5b73d241bccad793bf88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdk8s-kbld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6be6c2728fc61eee980d78a40e52500b12a5d5c28f128b1fc21a7d18730c806 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in regex-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b936ae131832162bed5acdfe48c28a3ce6537c1fc7a50b579166c37116b7d358 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in demo-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7efb62b6588eae7ef14f94a8669af77aca640e90b4677dfcddbba8cce6ad547 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ati-requisites-form (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d64ef4d7097080d38ce75ebf55cf4aea3bdaeecd2d3fef759558b249ac1abce Any computer that has this package installed or running should be considered...