Malicious code in @yoobic/design-system (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3dc662cb25b7ebe3c1d58e79387906ea93fed4e7034c6e415b1befd1971874a Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @operato/shell (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ac476a02ea2559959f2fb9a0811fd56ee2380dfc7bd199f7731e350b5899ad Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in db-evo (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcfee85aff3b81b44dcc0c4c4fe99e193de46de665f2a0fe31221fcc6415c305 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47382 Malicious code in @art-ws/prettier (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0ad654106f2b917f883774d7484c2a6e0b8321808a7693b56ce60c52eaf85e3 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @things-factory/env (npm)

Suspicious postinstall script executing bundle.js and YARA rule match on bundle.js indicate potential malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88b8463d9fb16ac5faed1cd122997c683cc79534786bcf816139cefc13897168 Any computer that has this...

MAL-2025-47366 Malicious code in yargs-help-output (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1337d3becd83c0b3dc233069268371bc9e7395311560038f52cbe73384e4efa5 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47307 Malicious code in ember-headless-form (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4687ef20e35f1ba6932bfe28dbaae50901c594a51071d24c97e6d496f7001382 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47338 Malicious code in ove-auto-annotate (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73d921bb6f1f70021ae12802fbc01223f7ad55bdf036a5b565142f3d82af4aa3 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47277 Malicious code in @teselagen/react-list (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eae9e0260589e145031f17078f10e631996b6420cb9494ed5c5e4f378b01c94 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @teselagen/ove (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76c137afc6d3e31e5f4509c510c57e859b10399e8b246cd19aed5188a55f59b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47345 Malicious code in rxnt-authentication (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b91a5c1fc111834043bdb735e9a59a336ed170efa9b1396455c474bcd9752329 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47318 Malicious code in json-rules-engine-simplified (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3d77ef6c0caa448d46f58d6f7da23e9e7b3ae880920707f9dd730325bfda9f5 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @ctrl/ngx-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dee0d376ee8686a2ea0a7d46ab60c012856d8740b3563848112afbeb6d5b80c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ngx-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73e8f81aec4f30bf22f2a6e8a25a2662c6a72f8873311399d708ffb8d858f1cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47138 Malicious code in @ctrl/qbittorrent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af92aa639259dc9a287445d9fdbb2ec61beeb5adf71ff13a6e8f9bceb79971a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ctrl/magnet-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96e0d70a5cb3964405f7aba9078b5161152b463c1d39a33de953fd10cee2c41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ctrl/golang-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5ecdb39263cebdde95cdf053ac5e3bbb38aea40824853c2004d1ada8254e138 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ctrl/tinycolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21271c2ac161a78b2e79e14edbfba306dd2aa53c17aae63f3b009ba9288e1ddb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...